P.O. Box 85518 
Lincoln, NE 68501-5518 

CHANGE SERVICE REQUESTED 

July 16, 2010 
Volume 32 Number 15 
www.processor.com 



n This Issue... 



I 

COVER FOCUS 

Security: Is Your Enterprise Up To Speed? 

Keeping on top of the latest security threats is a 
never-ending process. Here are tips and advice 
for evaluating security defenses and information 
on the latest technologies and trends to protect 
your enterprise. 
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Windows 7 

We'll catch you up to date 
with the latest regarding 
Windows 7, including tips for 
getting it to work with existing 
systems and how to avoid 
problems others have run into while installing 
and implementing the OS. See page 24. 
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■ Product Spotlight: 

Data Center-Grade UPSes page 16 

■ Product Spotlight: Fire Suppression page 18 

NETWORKING & VPN 

■ Troubleshooting cabling issues can be particularly 
vexing. A logical approach to arranging and organizing 
cabling will save hours of frustration page 20 

■ ManageEngine OpManager network monitoring soft- 
ware now includes Automatic Layer 21 Layer 3 mapping 
and an improved VMware monitoring add-on to deliver 
more in-depth information page 21 

■ Napatech's NT20E2 Capture Adapter and the NT20E2 
In-Line Adapter support preprocessing and offloading for 
improving network appliance performance page 21 

■ The need to support surveillance, high-definition video, 
unified communications, and similar technologies in the 
enterprise is placing an emphasis on cabling page 22 

■ Making sure the enterprise has legal, licensed copies 
of all software applications is a task that data center 
managers need to tackle head-on, because piracy's 
consequences can be dire page 23 
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■ In an age of legal discoveries, breaches over wireless 
networks, and scams on Facebook, data encryption 
has become more vital than ever page 29 

■ Product Spotlight: Portable Storage page 30 

■ Bus-Tech's main claims to fame are its Mainframe 
Data Libraries, a set of virtual tape library 
controllers that work with IBM-compatible and Unisys 
2200 mainframes page 32 

■ In 1992, the U.S. Environmental Protection Agency 
established its Energy Star Certification program, 
which today has certifications in more than 60 
product categories page 33 
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Assess Your Defenses 

Regular Security Evaluation Is A Top Priority In A World Of Ever-Expanding Threats 



by Christian Perry 
• • • 

All is quiet on the IT front. 
Your systems are operating 
as designed, and the IT staff 
hasn't reported a serious secu- 
rity breach in ages. Yet despite 
the calm, are you truly con- 
fident that your enterprise's 
defenses are ready to protect 
your assets if a major 
threat came crashing 
through the doors? In 
a world teeming with 
increasingly sophisti- 
cated intrusion methods, 
nonchalance is never a 
wise strategy. 

"Being vigilant about 
monitoring for threats is 
essential, and enterpris- 
es need to realize this before a 
threat actually becomes an issue, so that 
threats can be managed by exception and not 
'trial by fire,'" says Gene Kim, CTO and co- 
founder of Tripwire (www.tripwire.com). 
"Many attacks take advantage of misconfig- 
ured, inadequately configured, or incon- 
sistently configured infrastructures. It is 
essential to obtain visibility into all the activ- 
ities, events, and changes that relate to busi- 
ness-critical systems and resources." 

Know Your Security 

A strong security track record might indi- 
cate that your defenses are indeed strong. 




but it could instead simply reflect a string 
of good luck. But regardless of whether 
you've been hit by malware or other 
threats, it makes sense to occasionally test 
your security systems to ensure that they 
can handle any threats that might come 
your way. A closer look at your systems 
might reveal that vulnerabilities exist where 
you'd never expect them. 

Take the example of a company that lost 
$450,000 as a result of a banking Trojan 
that took advantage of several missing or 
Go to Page 8 



Key Points 



Although seenningly secure controls nnight be 
in place, intruders will ainnost always find and 
exploit any existing vulnerabilities if sonne- 
thing valuable resides behind those controls. 

A thorough security assessnnent should not 
only identify your critical assets but also the 
potential threats to those assets and how 
nnuch dannage the threats could cause. 

Instead of relying solely on in-house person- 
nel to test your systenns, consider hiring an 
outside auditor who can approach the 
process without fanniliarity and bias. 



Third-Party Software Support 

Providers Reduce Maintenance Costs But Can Infuriate Software Vendors 



by Bridget Mintz Testa 
• • • 

Software support — upgrades, new 
capabilities, patches — come from the ven- 
dor. That's the way it's always been in the 
industry, although in other realms, people 
and companies are free to buy services 
from whomever they please. 

Some independent companies have 
found a niche in product updates that they 
can do as well as the software vendors, 
without any need for access to source code. 
A number of customers have also decided 
they no longer want to pay the high prices 
of software support from the manufacturer. 
The two groups have come together for 



Key Points 



Third-party application support and 
nnaintenance refers to ordinary software 
work that anyone can do; third-party 
product support and nnaintenance is 
typically perfornned by software vendors 
for licensed custonners. 

When custonners elinninate product vendor 
support, they incur a nunnber of risks. 

Because the third-party product 
nnaintenance industry is so snnall, due 
diligence can be challenging. 



mutual gain, infuriating the vendors. There 
are plenty of risks, but using third parties 
for product maintenance can greatly bene- 
fit a customer who is happy with the cur- 
rent product version and sees no need for 
new features. 

Two Types Of Third-Party 
Software Maintenance 

Gartner Research defines two types of 
third-party software maintenance. One type 
is what Gartner calls application and sup- 
port, says Bob Igou, research director for 
software support services at Gartner. "This 
is about a part of the application that's been 
Go to Page 8 
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SECURITY 



■ Web filtering, the technology of blocking certain sites 
or types of Web content, can help mitigate security 
threats if you use it in your SME properly page 34 



MESSAGING 
& TELEPHONY 



■ These days, even small enterprises are likely to have 
IT resources on staff with at least some communications 
expertise. The problem is that IP communications 
involves a different knowledge set than conventional 
PBX-based telephony page 35 



SERVERS 



■ For many data centers, it can make sense to rebuild 
servers instead of paying more money to replace them. 
Learn about some ways to get best value for your money 
when rebuilding servers page 36 



■ Product Spotlight: 

Supermicro Servers 



. page 37 



CLIENTS 



■ Maya Assurance needed to launch a paperless 
office as soon as possible. Cabinet NG CNG-SAFE 
was the product Maya Assurance needed to make 

it happen page 38 

■ Business intelligence isn't a new concept in IT, 
but it has gained visibility and importance as today's 
digitized, online enterprises have become inundated 
with data page 39 

SERVICES 

■ There are plenty of risks, but using third parties for 
product maintenance can greatly benefit a customer 
who is happy with the current product version and sees 
no need for new features page 1 

■ Product Spotlight: 

Equipment Recycling & Disposal Services page 40 

■ Acumen Solutions is an IT consulting firm in Vienna, 
Va., that provides advice and vendor-agnostic software 
in four solutions categories page 42 

DATA CENTER 
MANAGEMENT 

■ Many small to medium-sized enterprises are 
turning to virtualization for some or all of 

their applications page 43 

■ There is no doubt that open-source technologies 

have gained traction in SMEs. But as enterprises 
take a hard look at open-source technologies, 
relevant issues must be considered before taking 
the plunge page 44 

k The idea of a computing utility isn't new but is finally 
coming to fruition.Virtual private clouds enable enter- 
prises to seamlessly extend existing data centers into 
the cloud page 45 



News 



I EMC To Buy Greenplum 

EMC has signed an agree- 
ment to acquire Greenplum, 
a provider of disruptive data 
wareliousing teclinology and "key 
enabler of 'big data' clouds and 
self-service analytics," EMC 
says. Following tine acquisition, 
Greenplum will serve as tine foundation of a 
new data computer product division in EMC's IT 
business. Using a sinared-notiiing MPP (massive- 
ly parallel processing) architecture, EMC says, 
Greenplum can deliver 1 to 1 00 times the per- 
formance of traditional database software at a 
lower price. Greenplum's customers include NAS- 
DAQ OMX, NYSE, Skype, and Fox Interactive 
Media/MySpace. Combined with EMC's virtual- 
ized Private Cloud infrastructure, EMC President 
and COO Pat Gelsinger says, the Greenplum 
acquisition will create a "best-of-breed solution for 
tomorrow's 'big-data' challenges." The all-cash 
acquisition is set to complete in the third quarter. 

I Cisco Tabs New Channel Leaders 

Cisco announced several executive changes in 
its channel organization, including the naming of 
Edison Peres as senior vice president of world- 
wide channels to head up Cisco's channel part- 
nerships. In a blog post, Keith Goodwin, senior 
vice president, worldwide partner organization, 
stated that Peres will lead all aspects of Cisco's 
global channel management, saying "there's no 
more qualified leader than Edison to take our 
channel relationships to the next level." Good- 
win also announced that Wendy Bahr is now 
the senior vice president of Global and Transfor- 
mational Partnerships and will head a move to 
"invest in creating new transformational partner 
relationships and business models." Elsewhere, 
Dave O'Callaghan has been named vice presi- 
dent of Worldwide Commercial Sales and will 
focus on accelerating growth in the SMB market 




via a Worldwide Commercial Sales team 
in Cisco's Worldwide Partner 
Organization. Cisco is also 
actively searching for a senior 
vice president for its U.S. and 
Canadian channel. 

I IE Gains Market Share 
At Firefox's Expense 

According to the most recent figures 
from Net Applications, Microsoft's Internet 
Explorer browser gained market share in the 
past month, reversing a lengthy trend of losses 
and snatching back share from its biggest rival, 
Mozilla's Firefox. Specifically, IE increased its 
share from 59.8% in May to 60.3% in June; 
Firefox, on the other hand, dropped from 
24.3% to 23.8%. Net Applications attributes 
part of lE's gain to the increase in Windows 7 
implementations. Rounding out the top five 
browsers are Google's Chrome, which grew 
from 7% to 7.2% month over month; Apple's 
Safari, which saw a 0.1% increase to 4.9%; 
and Opera, which fell from 2.4% to 2.3%. 

I Windows 7 Significantly Reduces 
Support Costs 

According to a report from research firm IDC, 
Microsoft's newest OS can offer SMEs consid- 
erable cost savings, including reducing support 
costs by 50% or more. In fact, IDC found that 
small companies migrating from WinXP or 
Vista to Win7 reduced their help desk support 
costs by 65%, PC/OS support costs by 55%, 
and deployment costs by 45%. Adding to the 
savings is the increase in employee productivi- 
ty once users are switched to the new OS, 
which offers better security, less downtime, and 
fewer reboots. The report, which was spon- 
sored by Microsoft, estimates that small to mid- 
sized enterprises that switch to Win7 can see 
returns on their investments as soon as 7.2 
months from implementation. 



WATCH THE This information provides a quick glimpse of current and historical stock 
j^^^^ J^l^ prices and trends for 13 major companies in the technology market. 



Company 


Symbol 


Year Ago 


June 24 $ 


July 8 $ 


previous issue 


AMD 


AMD 


$3.48 


$8.13 


$7.37 


T 9.35% 


OA 


CA 


$16.56 


$19.23 


$18.56 


T 3.48% 


Cisco Systenns 


CSCO 


$18.17 


$22.57 


$22.55 


T 0.09% 


Dell 


DELL 


$13.15 


$12.93 


$12.78 


T 1.16% 


Google 


GOGG 


$410.39 


$475.10 


$456.56 


▼ 3.9% 


HP 


HPQ 


$37.30 


$39.03 


$45.48 


A 16.53% 


IBM 


IBM 


$102.08 


$128.19 


$127.97 


TO.17% 


Intel 


INTC 


$16.02 


$20.32 


$20.10 


T 1 .08% 


McAfee 


MFE 


$40.14 


$31.43 


$31.56 


A 0.41% 


Microsoft 


MSFT 


$22.44 


$25 


$24.41 


T 2.36% 


Oracle 


ORCL 


$20.32 


$22.22 


$23.22 


▲ 4.5% 


Red Hat Software 


RHT 


$19.35 


$30.78 


$30.55 


T 0.75% 


Symantec 


SYMC 


$15.34 


$14.42 


$14.50 


A 0.55% 



NOTE: This information is meant for reference only and shiould not be used as a basis for buy/sell decisions. 



I Execs Prefer Private Clouds 

A recent survey from IDC indicates that 55% of 
IT executives prefer a private cloud over a pub- 
lic cloud. Only 22% say that the two cloud types 
are equally appealing. IDC defined a private 
cloud as an internal corporate cloud resource 
where the IT organization is the vendor, offering 
self-service provisioning, pay-per-use options, 
and simple access. When asked what applica- 
tions companies would use on a private cloud, 
75% of respondents said they'd run collabora- 
tive applications and 53% said they'd use it for 
email. IDC says that most enterprises will fea- 
ture a mix of public and private clouds. 

I DRAM Prices Lower 

For the first time in a year, the price of DRAM 
decreased, and Gartner expects that the prices 
will slide for the rest of the year. DRAM prices 
had been on the rise primarily because of a short- 
age of chips, but when DRAM manufacturers in- 
creased production early in the year, supply and 
demand were no longer being taxed by the DRAM 
shortage. Gartner indicates DRAM had become 
expensive enough to account for 15% of the mate- 
rial cost of the average midrange PC. The cost 
caused PC vendors to take a tougher stance in 
negotiations. Competition with DRAM vendors will 
also help to drive down DRAM prices. 

I Windows Versions Vulnerable To Attack 

A new vulnerability has surfaced in Windows 
2000 Professional SP4 and Windows XP 
SP2/SP3. According to Secunia, which pub- 
lished a report detailing the vulnerability, the 
problem is the result of a boundary error in the 
UpdateFrameTitleForDocumentQ function of 
the CFrameWnd class in Mfc42.dll. The attack 
causes a buffer overflow error that, if unad- 
dressed, lets hackers launch code execution 
attacks that can take control of a computer. 
Through social engineering schemes, attackers 
can then steal data. To mitigate the situation, 
Secunia recommends restricting access to 
applications that let users input data that could 
be passed to the vulnerable function. 

I IT Leaders Unaware 
Of Advanced Threats 

Ponemon Institute recently conducted a survey of 
591 security professionals and found that 83% of 
their organizations have been targeted by ad- 
vanced threats, and 71 % say these types of 
threats have increased over the past year. But 
even though many know they have been target- 
ed, 41 % state they didn't always know when they 
were being attacked. According to Ponemon, 
zero-day attacks are the most common, and sur- 
vey respondents say that about half of the attacks 
they see are attempting to gain proprietary data, 
while the other half are looking to access person- 
al information. Just 19% of the respondents say 
they feel as if their IT leaders are fully aware of 
the need to defend against advanced attacks. 
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I Proposed Legislation 
To Require Cell Phone 
Warning Labels 

Ohio Congressman Dennis 
Kucinich is preparing legisla- 
tion to require warning labels 
on cell phones. The labels 
are intended to warn users 
about the potential risk of 
cell phone use, letting them 
decide the level of risk they 
will accept. The legislation 
also accounts for creating a new national 
research program to study the relationship 
between cell phones and health. The research 
would focus on the Specific Absorption Rate, a 
measure of cell phone radiation set by the 
Federal Communications Commission that cell 
phone makers are required to disclose. The 
studies would determine if the current regula- 
tions, established decades ago, are outdated. 

I Intel Announces 
New Research Division 

Intel announced its new Interaction and Exper- 
ience Research division that is designed to 
study and develop new forms of human/com- 
puter interaction. The company says it foresees 
a new user experience that will "become much 
more natural through gesture, voice, and touch 
interactions." The team of researchers will con- 
sist of user interface technologists and social 
scientists. Intel's new division aims to under- 
stand how people want to use technology in 
their lives. Possible advancements in technolo- 
gy include new social networking avenues, the 
ability to recognize everyday objects and hand 
gestures, and even the possibility to read 
human thoughts. 

I Government Devotes Money 
To Broadband 

The White House recently announced $795 mil- 
lion in grants and loans designed to bolster 
broadband adoption and use in the United 
States. The money is coming from the American 
Recovery and Reinvestment Act, and officials 
hope it can create or save about 5,000 jobs. The 
National Telecommunications and Information 
Administration and the U.S. Department of 
Agriculture's Rural Utilities Service will distribute 
the money across 66 broadband projects in all 
50 states. Projects include running fiber-optic 
cable and laying the groundwork for improved 
broadband access. The administration expects 
the subsidies to expand broadband services to 
685,000 businesses, 900 healthcare facilities, 
and 2,400 schools. In addition to the grants and 
loans, private investments account for $200 mil- 
lion to help with the announced projects. 

I GPS Set For Boom 

ABI Research reports that the No. 1 application 
for GPS device users is traffic information, and 
the audience of those who rely on traffic data 
from PNDs (personal navigation devices) will 
grow to more than 370 million by 2015; currently, 
PND users worldwide number about 57 million. 
ABI notes that more smartphones and features 
phones are shipping with GPS capabilities; how- 
ever, cellular-based traffic data has a tendency to 
be inaccurate. As the market matures, ABI says, 
independent traffic information vendors will need 
to seek new markets to accommodate for the 
falling revenues and increased competition. 

I IT Feels The Pressure 

Of Workplace Consumer Devices 

According to a new report from the IDC, the num- 
ber of consumer electronic devices, such as 
computers, smartphones, MPS players, and digi- 
tal cameras, will grow to 7 billion this year. And IT 
organizations that are integrating these devices 
may not have enough resources to support a 
secure and scalable infrastructure for the mobile 
needs of information workers, or iWorkers. IDC 
estimates that, within the 2 billion people who 
use consumer electronic devices and apps, there 



are 300 million iWorkers at companies with 
more than 500 employees. IDC expects the 
total number of mobile apps to reach 500,000 
this year. IDC's report notes that IT departments 
must be willing to use new tools to keep up with 
consumers who use multiple devices and numer- 
ous Web applications. 

I Hospitals Not Ready 

For Meaningful Use Requirements 

Hospitals are concerned about complying 
with "meaningful use" requirements for e- 
health records, according to a study by 
PricewaterhouseCoopers. The HITECH Act 
asks healthcare providers to validate a mean- 
ingful use for the electronic records or they will 
not receive stimulus funds from the govern- 
ment. The PricewaterhouseCoopers study 
shows that eight out of 10 ClOs fear they won't 
meet HITECH's requirements and will miss 
out on the more than $20 billion in funding. 
Healthcare ClOs are concerned about organiz- 
ing priorities such as overall cost, timely return 
investment, access to capital, vendor readi- 
ness, and company behavioral change. 

I IBM To Acquire BigFix 

IBM has announced an agreement to purchase 
Emeryville, Calif., -based BigFix as part of an 
initiative to roll out updates from the data cen- 
ter to servers, laptops, and desktops in the 
enterprise— but only those updates that comply 
with company policy. BigFix offers a simple, 
unobtrusive way for a PC to receive new 
updates and drivers with minimal user interven- 
tion, and the BigFix software has been prein- 
stalled on various OEM computers over the 
years. Terms of the deal were not disclosed, 
but it's expected to close in the third quarter. 

I Handhelds Gain Ground In Healthcare 

Healthcare market research firm Kalorama 
Information reports that mobile device sales in 
the healthcare sector are expected to surge 7% 
this year, reaching $8.8 billion for the year. The 
report, "Handhelds in Healthcare: The World 
Market for PDAs, Tablet PCs, Handheld Monitors 
& Scanners," looks at all such devices and fore- 
casts sales for specific healthcare categories. 
Products aimed at patient monitoring generated 
the largest increase, with a market share of 64%. 
The most popular devices used in the healthcare 
market are PDAs, smartphones, tablet PCs, and 
inventory or medication scanners. The report 
indicates that several factors are driving growth 
in the market, including the aging population and 
a shortage of medical professionals. 

I Youths & Minorities Lead Growth 
In Wireless Internet Access 

According to the latest Pew Research Center 
report, younger adults are the ones driving the 
growth of mobile Web applications. The report, 
"Mobile Access 2010," surveyed about 2,200 
adults and determined that 90% of U.S. citizens 
aged 1 8 to 29 own a cell phone and that users in 
that age group are more likely than others to be 
accessing mobile data applications. The most 
popular mobile device activities in that age group 
are text messaging, taking photos, accessing 
the Internet, playing music, playing 
games, and recording videos. Minority 
Americans are statistically more likely 
than others to access the Internet via 
wireless devices. 



IBM, and Microsoft. The European Commission 
had formally expressed its concerns before the 
deal was done. With promises from Oracle to 
keep competition healthy, however, the pur- 
chase was finalized. 

I Gartner Modifies IT Spending Forecast 

The European debt crisis has prompted Gartner 
to reduce its global IT spending forecast. Pre- 
viously, the research firm predicted a 5.3% in- 
crease this year, but it now believes worldwide 
IT spending will grow by 3.9%. In 2009, the glob- 
al IT industry spent $3,225 trillion, and Gartner 
predicts spending to total $3.35 trillion this year. 
Computing hardware is at the top of Gartner's 
list, with a projected increase of 9.1%. Gartner 
also forecasts software spending will grow by 
3.1%, IT services will rise 2.9%, and telecom will 
see a 3.4% upsurge. Richard Gordon, research 
vice president at Gartner, says longer-term, pub- 
lic-sector spending will be impacted as govern- 
ments try to crawl out of debt. 

I Obama Backs Broadband Availability 

President Barack Obama has backed the 
FCC's plan to release 500MHz of wireless 
spectrum to allow for greater broadband avail- 
ability. Much of the spectrum will be available 
for auction within the decade. The government 
plans to use at least some of the money from 
the auction to build better communications sys- 
tems for emergency and public safety person- 
nel. The extra spectrum will be gathered from 
governmental agencies, private companies 
(that would be given incentives for giving it up), 
and currently unused spectrum. The plan is 
designed to spur broadband penetration, 
growth in the private sector, and innovation. 

I Report Looks At Enterprise 
Telephone System Market 

Cisco and Avaya were essentially tied for first 
place in the PBX and key telephone systems 
markets in the first quarter of this year, according 
to a report from research firm Infonetics. The 
report, titled "Enterprise Unified Communication, 
VoIP, and TDM Equipment," shows that Avaya 
benefitted from its acquisition of Nortel with a 25% 
quarterly improvement in PBX sales, but Cisco 
also had a strong performance. Although neither 
company pulled away from the other, Cisco still 
enjoys a slight lead. Both companies saw their 
best quarter of earnings since the end of 2008. 

I Motorola Details Plans 
To Split Company In Two 

Motorola formalized the announcement that it 
will split itself into two separate companies 
called Motorola Mobility, which will handle 
mobile phones and home office products, and 
Motorola Solutions, which will control the large 
enterprise and networking products. Some say 
the move is to help counter the losses the 
mobile phone division has experienced during 
the past few years and subsequently funnel 
money from one company to the other. Motorola 
will have co-CEOs with Sanjay Jha managing 
Motorola Mobility and Gregory Brown running 
the Motorola Solutions company. The change is 
expected to happen next year. 
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I Oracle's Sun Acquisition 
Appealed In Europe 

The European Commission has been 
asked to re-evaluate Oracle's acquisition of 
Sun Microsystems. The formal appeal was filed 
in Luxembourg by Monty Widenius, an open- 
source software advocate who co-developed 
Sun Microsystems' MySQL. Sun was officially 
purchased in January with the permission of 
both the United States and the European Union. 
Until the acquisition, MySQL (an open-source 
database program) was one of the few alterna- 
tives to proprietary programs made by Oracle, 




I SIA Sees Increase 
In Chip Sales 

The Semiconductor Industry 
Association says worldwide 
semiconductor sales rose 
47.6% in May compared to the 
same month a year ago. That's a 
•% rise from a monthly sales 
record set in April. Global semiconductor 
sales rose to $24.7 billion in May, up from $16.7 
billion a year ago, because of strong demand for 
cell phones, PCs, and cars, according to the 
SIA. Emerging markets such as India and China 
are also driving demand for computers and com- 
munications products. Despite these positive 
results, the SIA says the chip industry should 
expect to see year-over-year growth rates slow 
down during the second half of this year. 
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Are you looking to learn more about data center 
or IT topics? Network with some of your peers? 

Consider joining a group of data center 
professionals. If you have an event you'd like 
listed, please send an email to 
feedback® processor.com. 



- JULY - 

ISSA Upstate South Carolina 
July 16 
NuVox 

301 N. Main St., Suite 5000 
Greensville, S.C. 
www.upstate-issa.org 



VMware Vsphere: Fast Track 
July 19, 8 a.m. 
Platform Labs 
1275 Kinnear Road 

Columbus, Ohio 
www.platformlab.org 



AITP Southwest Missouri 
July 20 
Springfield, Mo. 
aitpspringfield.org 



ISSA St. Louis Chapter 
July 20 
St. Louis, Mo. 
stl.issa.org 

Oklahoma City AITP Chapter 
July 20 
Oklahoma City, Okla. 
www.aitp.org/organization/chapters 
/chapterhome.jsp?chapter=40 

AFCOM Central Ohio 
July 21 
Columbus, Ohio 
www.afcomcentralohio.org 



ISSA Des Moines 
July 26 
3920 SW Camden Circle 

Ankeny, Iowa 
www.issa-desmoines.org 



ISSA Inland Empire 
July 27, 11:30 a.m. 
Coco's Restaurant and Bakery 
60 West Foothill Blvd. 
Upland, Calif. 
ie.issa.org 

ISSA Baltimore 
July 28, 4:30 p.m. 
Sparta Inc. 
7110 Samuel Morse Drive, Suite 200 
Columbia, Md. 
www.issa-balt.org 



AITP California Southland 

July 28 
www.aitpcalsouthland.org 

- AUGUST - 

AFCOM Dallas/Fort Worth 
Aug. 10 
Dallas, Texas 
www.dfwafcom.org 



AFCOM St. Louis "Gateway" Chapter 
Aug. 10 

Schneider Electric Technology Center 
807 Corporate Centre Drive 
O'Fallon, Mo. 
www.afcom.com/afcomnew/stlouis.html 

AITP Garden State 
Aug. 10 
Jim Johnston's Steakhouse 
58 Eisenhower Parkway Mountain Plaza 
Roseland, N.J. 
tech.groups.yahoo.com/group 
/aitpgardenstatechapter 



AITP Richmond 
Aug. 10 
2015 Staples Mill Road 
Richmond, Va. 
www.aitprich.org 



PASS Wisconsin SQL Server User's Group 
Aug. 10, 4:30 
Microsoft Office 
2176 Woodcrest Drive 

Green Bay, Wis. 
wisconsin.sqlpass.org 



Greater Wheeling AITP 
Aug. 11 
Wheeling, W.Va. 
www.aitp-wheeling.org 



For more Upcoming IT Events, see page 10. 
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The Processor Product Releases section 
includes brief overviews of data center products. 

All products listed have been released recently, so use this section to get 
up-to-date with what's new on the market and to find products you need. 



Manufacturers: 

Do you have a new product that data center/IT 
managers would be interested in learning about? 

Send your press release or product infornnation 
to press@processor.com. 



Clients 



■ Addonics Technologies CFast 

Addonics Technologies announced a 
family of CFast adapters to connect 
CFast media to any SATA port inside a 
desktop PC, rack mounted system, or 
notebook computer and its own brand of 
CFast media. The adapters include a 
CFast HDD adapter and a SATA CFast 
adapter, which is available in 8GB and 
32GB capacities. 

■ AMD Opteron 4000 Series 

AMD introduced the AMD Opteron 
4000 Series, which is a 1 and 2P server 
platform ideally suited to the needs of 
high-end embedded systems, cloud, hyper- 
scale data centers, and SME customers. 




The AMD Opteron 4000 Series platform 
offers four- and six-core performance at 
less than 6W per core, and enables users to 
double server density while maintaining 
the same power budget as the previous 
generation. The AMD Opteron 4000 
Series platform is chipset-consistent with 
the 8- and 12-core AMD Opteron 6000 
Series platform, and AMD claims that 
both platforms will support the new 
"Bulldozer" core, planned for 2011. The 
AMD Opteron 4000 Series platform starts 
at $99. 

■ HP Compaq 6000 Pro 
All-ln-One Business PC 

HP released the HP Compaq 6000 Pro 
All-in-One Business PC. This system 
comes with dual display capability for 
videoconferencing. It also features a 
21.5-inch LED-LCD screen, the option of 
an Intel Core 2 Duo processor, and sup- 
port for an optional 80GB SSD boot drive 
alongside its hard drive of up to 1TB. 

■ l\/linicom Advanced Systems 
PS/2 To USB Converter 

Minicom Advanced Systems added the 
PS/2 to USB Converter to its line of 
legacy data center equipment. The PS/2 
to USB Converter is a plug-and-play 
connector that lets IT staff use their 
existing PS/2 servers, KVM switches, 
and KVM extenders with a USB key- 
board or mouse. 

■ l\/lotion Computing J3500 

Motion Computing has released the 
J3500, a rugged tablet PC model that's 
built on Intel Core vPro and Windows 7. 
Features include capacitive dual-touch 
abilities, extra-durable Corning Gorilla 
glass, a 160GB hard drive and 64GB or 
128GB SSD, built-in 3MP Web cam, and 
integrated Gobi2000 mobile broadband 
with GPS. 

■ Sybase SQL Anywhere 12 

Sybase announced SQL Anywhere 12, 
a data management and synchroniza- 
tion solution for database applications 
running outside traditional data center 



environments. The SQL Anywhere 12 
requires little or no onsite IT support. 
Enhancements include spatial and scale- 
out support, mobility tools, self-manage- 
ment innovations, and productivity 
enhancements such as full-text search fil- 
tering capabilities. 



lESSAGiNG & Telephony 



■ Cisco Cius 

Cisco announced the Cisco Cius, an 
ultra-portable mobile collaboration busi- 
ness tablet. The device, which weighs 
just 1.15 pounds, provides access to 
Cisco collaboration and communication 
applications, along with virtual desktop 
integration. It offers full telepresence 
interoperability, HD video streaming, 
real-time video, multiparty conferencing, 
email, messaging, browsing, and more. 

■ Cisco Hosted Collaboration Solution 

Cisco introduced the Cisco Hosted 
Collaboration Solution. As part of Cisco 
Unified Communications, it lets users 
choose how they want to deploy collabo- 
ration applications in their company. 
Cisco Hosted Collaboration Solution also 
lets users deploy and host multiple col- 
laboration programs on a single server in 
a virtualized environment. 

■ DataMills EdgeSafe 
PST2PST Backup 

DataMills released the EdgeSafe 
PST2PST Backup for Microsoft Outlook. 
EdgeSafe allows enterprises to back up 
their Outlook emails in one central net- 
work location while preventing data 
compromise. It backs up PST files from 
Exchange Server as well as PST files 
from other hosted email servers over a 
P0P3 connection. 

■ ManageEngine Exchange 
Reporter Plus 

ManageEngine released Exchange 
Reporter Plus, a solution designed for 
Microsoft Exchange administrators to 
better understand, plan for, and control 
the use of their organization's email 
resources. Exchange Reporter Plus is 
currently accessible through an online 
download (starting at $445) and gives 
administrators immediate access to more 
than 80 prepackaged reports. Charts, 
graphs, and text are used to provide an 
end-to-end view of the organization's 
exchange infrastructure, including indi- 
vidual user details, mailbox storage 
statistics, amount of traffic regularly 
generated, and presence of content disal- 
lowed by company policy. The software 
allows administrators to understand pat- 
terns in usage, making resource optimiza- 
tion and capacity planning more accurate. 

■ Network Equipment Technologies 
SmartSIP 

Network Equipment Technologies 
announced the release of SmartSIP, 
which provides interoperability for SIP 
endpoints and Microsoft unified commu- 
nications. The SIP protocol is used to 
control IP communication sessions that 
involve single or multiple media streams. 
The product is the first enterprise applica- 
tion that uses Microsoft's UCMA 
(Unified Communications Managed API) 
to provide for the interoperability of lega- 
cy SIP endpoints. SmartSIP can be used 
to extend existing SIP endpoints for use 



with Microsoft's Office Communications 
Server to reduce operating expenses by 
automatically provisioning selected SIP 
phones. Additionally, Active Directory is 
used for inbound and outbound call rout- 
ing and caller name display. 



Networking & VPN 



■ Anfibia Software Reactor 

Anfibia Software has announced the 
release of Anfibia Reactor, a Web-based 
server monitoring solution. The product 
allows administrators to securely moni- 
tor connections, servers, databases, and 
hard drives from any location. If issues 
arise, alerts can be sent via Twitter or 
email. Historic data is collected to allow 
users to detect network bottlenecks and 
analyze CPU/MEM usage patterns. 

■ BLADE Network Technologies 
RackSwitch 10 Gigabit Ethernet Switch 

BLADE Network Technologies an- 
nounced that the RackSwitch 10 Gigabit 
Ethernet Switch has been updated with 
Multicast protocols at sub-700 nanosec- 
ond port-to-port latency for high-fre- 
quency trading, market data, and video 
streaming, among other applications. 
Features include PIM Dense Mode and 
PIM Sparse Mode. 

■ Brocade 8Gbps 
Fibre Channel Products 

Brocade announced several new prod- 
ucts designed to extend its SAN and serv- 
er connectivity portfolio. Products include 
the Brocade 804 8Gbps Fibre Channel 
HBA for HP c-Class BladeSystem, HP 
StorageWorks P2000 G3 Modular Smart 
Array Virtualization SAN Starter Kit, and 
the HP StorageWorks B-series Data 
Center SAN Director 64-port 8Gbps Fibre 
Channel Blade. 

■ F5 Networks 
FirePass SSL VPN 7.0 

F5 Networks released FirePass SSL 
VPN 7.0, the latest version of its SSL 
VPN solution. Features include improved 
IT management, endpoint security, and 
upgraded hardware identification tools 
for blocking corporate network access. 
Firepass 7.0 also offers flexible deploy- 
ment options, including an SSL VPN vir- 
tual appliance supported by VMware 
vSphere. In addition, you can use Fire- 
Pass with the FirePass Client and the 
BIG-IP Edge Client. 

■ Fiberlink MaaS360 Patch Management 
From The Cloud Service 

Fiberlink released its MaaS360 Patch 
Management from the Cloud Service for 
IT device management. The patch man- 
agement service pushes patches for 
Microsoft systems as well as for vulnera- 
bilities in programs such as Java, 
QuickTime, and Adobe Reader. Designed 
to simplify IT workflow, MaaS360 man- 
ages deployment, tracking, and reporting, 
Fiberlink says. 

■ Firetide FWB-200 

Firetide released its MIMO-based 
point-to-point outdoor wireless Ethernet 
bridge, the FWB-200. The FWB-200 
works with Firetide mesh networks and 
Firetide enterprise WLANs to maintain 
an efficient management system. The 
FWB-200 includes a radio (with external 
multi-element antennas) that is compliant 



with the 4.9 and 5GHz multistream 
MIMO 802.1 In standard. 

■ ManageEngine OpManager 

ManageEngine has upgraded its Op- 
Manager network monitoring software to 
offer Automatic Layer 2/Layer 3 mapping 
and use native VMware APIs to discover, 
map, monitor, and report on VMware host 
servers and guest instances. The APIs also 
support VMotion movement of virtual 
instances between physical servers. 
Details of the entire virtualized infrastruc- 
ture are made immediately accessible from 
the OpManager dashboard and summa- 
rized in various views, including Top 
VMs, Top Hosts, All Devices, and 




ManageEng 

Powering IT ahead 



Alarms. In-depth performance information 
can be found through the use of the more 
than 70 deep VMware monitors, with all 
data collected being stored and available 
in any one of the many out-of-the-box 
reports. For more information on this 
product, see page 21. 

■ Motorola AP 6511 802.1 In WallPlate 

Motorola released the AP 6511 802.1 In 
WallPlate access point, which is designed 
to extend wireless LAN to multiroom 
facilities. This upcoming (4Q10) access 
point runs the Wi-NG OS and supports 
CAT5 and 6 in- wall cabling. 

■ Napatech NT20E2 Capture 
& In-Line Adapters 

Napatech has released its first 2x10 Gbps 
intelligent real-time network analysis 
adapters for PCI-Express Gen 2: the 
NT20E2 Capture Adapter and the NT20E2 
In-Line Adapter. Both low-profile form fac- 
tor models support preprocessing and 
offloading for improving network appliance 
performance. The NT20E2 Capture Adapter 
features GPS, IEEE1588v2, or CDMA- 
based time synchronization; traffic dedupli- 
cation; and 10ns precision time-stamping 
for received packets. The NT20E2 adapters 
deliver 20Gbps data throughput, capturing 
and transmitting up to 30 million packets 
each second. Both products support traffic 
generation with configurable Inter-Frame 



Napatech NT20E2 Adapter 




Gap, IP/UDP/TCP checksum generation, 
and time-stamp based transmission. 
Napatech network adapters support 
LibPCAP and PCAP applications such as 
SNORT on Linux, FreeBSD, and Windows 
operating systems. Each adapter is priced 
at $17,919. For more information on this 
product, see page 21. 

■ Nimsoft Unified Monitoring 

Nimsoft announced enhancements to the 
Nimsoft Unified Monitoring architecture 
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that enable customers to better monitor 
and manage critical business applications 
across the infrastructure, including SaaS, 
hosted, and virtualized environments. 
There's now a Unified Monitoring Portal 
that provides customizable Web 2.0 dash- 
boards and reporting, as well as expand- 
ed resource coverage to gather data 
from more than 100 systems, devices, 
and servers. 

■ Parallels Server For Mac 4 

Parallels has released Parallels Server 
for Mac 4. The release aims to increase 
the speed and reliability of virtual envi- 
ronments in small businesses by consoli- 
dating multiple OSes so that a company's 
redundant hardware can be replaced and 
its capabilities extended resulting in 
lower power consumption, less space 
required, and less administration atten- 
tion needed. Pricing starts at $1,999. 

■ RadVlew Software 
WebLOAD Professional 8.5 

RadView Software announced Web- 
LOAD Professional 8.5. WebLOAD 
Professional 8.5 provides complete code- 
free load testing that includes parameteri- 
zation, correlation, and validation. The 
updated version introduces statistical cor- 
relation reports that help identify and iso- 
late performance bottlenecks. This release 
provides superior support for AJAX and 
other rich Internet technologies such as 
the Adobe Flex AMF protocol. 

■ Red Hat Cloud Infrastructure Solutions 

Red Hat refreshed its offering of tools 
and expertise to help customers deploy and 
manage cloud environments. Red Hat also 
made improvements to its Red Hat Premier 
Certified Cloud Provider Program. The 
company also announced Red Hat Cloud 
Foundations, and Cloud Foundations: 
Edition One is now available. 

■ Red Hat Enterprise Virtualization 2.2 

Red Hat announced the release of Red 
Hat Enterprise Virtualization 2.2. Aimed at 
creating a foundation for the virtualization 
of Red Hat Enterprise Linux and Microsoft 
Windows, as well as for cloud computing 
environments, the update includes new 
scalability capabilities, migration tools, 
and features meant to enhance the pro- 
duct's performance and security. 

■ Riverbed Technology 

Riverbed Technology is partnering 
with Microsoft to release the Riverbed 
WAN optimization technology along 
with Microsoft Forefront TMG (Threat 
Management Gateway). Riverbed's 
WAN gateway combines its virtualized 
Riverbed Services Platform and the 
Steelhead appliance hardware. Riverbed 
customers can run Microsoft services on 
Windows Server 2008/2008 R2/2003, 
Active Directory, and DNS/DHCP. 

■ Silver Peak 

VX WAN Optimization Appliances 

Silver Peak has released a family 
of virtual WAN optimization applianc- 
es within the VX product line. The appli- 
ances are software-only versions of the 



Silver Peak 



company's NX appliances. The line aims 
to maximize application performance 
over a WAN while reducing IT-related 
costs. Optimization features include 



Network Acceleration to work past 
WAN latency. Network Integrity to cor- 
rect packet delivery issues and allocate 
WAN resources, and Network Memory 
to maximize bandwidth usage. Models 
include the VX-1000 (up to 4Mbps 
WAN capacity; 8,000 simultaneous user 
sessions), VX-2000 (up to 10Mbps; 
64,000 sessions), VX-3000 (up to 
20Mbps; 64,000 sessions), and VX-5000 
(up to 50Mbps; 64,000 sessions). 

■ Tangent Web Hawk 

Tangent has released the Web Hawk 
($2,995 for 150 users; $8,990 for 1,501 to 
6,000 users), a content-filtering appliance 
for managing Internet traffic. Features 
include automatic Web site filtering 
based on customized rule sets, Web mon- 
itoring/logging, and administrator- 
defined white and black lists for desktop, 
IP range, or user/group parameters. 
Malware, antiphishing, antivirus, proto- 
col, and intrusion features are included. 

■ WatchGuard Technologies 
Appliance Operating System Updates 

WatchGuard Technologies launched 
several enhancements for their Exten- 
sible Threat Management and Extensible 
Content Security appliances. Features 
include support for cloud-based security 
through Reputation Enabled Defense, a 
proxy performance boost, a wireless 
small office hotspot, new Web service 
APIs, stronger security, faster perfor- 
mance, and improved management and 
reporting features. 

■ ZyXEL Communications N4100 

ZyXEL Communications introduced 
the N4100, an 802.1 In hotspot gateway 
integrated with a four-port switch. The 
N4100 is designed as an access con- 
troller for service providers and features 
plug-and-play technology. The product 
accepts client configuration for log-on, 
supports credit card billing, and is a Wi- 
Fi-certified device. The N4100 is priced 
at $579.99. 



Physical Infrastructure 



■ HP Intelligent Power Distribution Unit 

HP introduced its Intelligent Power 
Distribution Unit, aimed at providing 
precise local and remote monitoring of 
power consumption. The product can 
accurately track and control power con- 
sumption to help managers correctly pro- 
vision power in the data center. The HP 
iPDU features remote management via a 
built-in Web engine, including power- 
cycle ability of individual outlets or pairs 
of outlets. 

■ Icron ExtremeLink 

Icron announced the availability of its 
line of ExtremeLink KVM extenders, 
which includes the ExtremeLink 3500 
with a reach of 500 meters and the 
ExtremeLink 4500, which supports LAN 
connectivity. Features include a 1680 x 
1050 resolution, DVI video, three USB 
2.0 ports, stereo audio, and support for 
all operating systems. 

■ Onset H0B0U12 

Onset expanded the range of measure- 
ment options for its line of HOBO U12 
data loggers. The multichannel versions 
of HOBO U12 data loggers can now 
measure and record kilowatts, air veloci- 
ty, gauge pressure, differential pressure, 
DC current, and other energy and envi- 
ronmental parameters. The expand- 
ed measurements are possible through 
the introduction of a new, compact 
power adapter. 



■ Panduit TX6A-SD 

Panduit announced the availability of 
its TX6A-SD, a small-diameter Category 
6A copper cabling system, which is part 
of Panduit' s High Speed Data Transport 
solutions. The TX6A-SD offers a 0.24- 
inch cable diameter for easier cable 
routing that increases fill capacity up 
to 115%, enabling users to deploy a 
lOGBASE-T solution. 



Security 



■ Astaro Security Gateway Version 8 

Astaro released Security Gateway 
Version 8, its unified threat management 
hardware appliance. Now with IPv6 and 
country blocking support. Security 
Gateway Version 8 also lets different 
admins enjoy different access permission 
levels. Also new are remote user network 
activity logging and a new kernel and 
base system that provides 64-bit support. 

■ Attachmate Luminet 

Attachmate announced the availability 
of Luminet, its enterprise fraud manage- 
ment solution. With Luminet, users can 
reveal user activity within enterprise 
applications and transform the data into 
usable intelligence. Features include 
noninvasive application-level activity 
capture, a screen-based visual replay 
with search capability, and custom ana- 
lytics, including dashboards and reports. 

■ Barracuda Networl<s 
Barracuda Spam & Virus Firewall 

Barracuda Networks introduced new 
features to the Barracuda Spam & Virus 
Firewall that are designed to enhance full 
inbound and outbound email scanning 
from the same appliance. The features 
work to keep confidential or sensitive 
information from outside disturbance by 
extending beyond spam and virus scan- 
ning to include broader content inspec- 
tion of email. 

■ Bit9 Parity Suite 6.0 

Bit9 announced the release of Bit9 
Parity Suite 6.0, an application whitelist- 
ing solution that helps protect enterprises 
from targeted and zero-day attacks. 
Features include file integrity monitoring 
to prevent malware from making changes 
to files, registry protection, operating sys- 
tem integrity, and threat identification. 

■ Catbird vCompliance 1.1 

Catbird announced the vCompliance 
1.1 virtualization security and compli- 
ance solution. It includes monitoring fea- 
tures for enforcing the HIPAA-HITECH 
and PCI DSS v 1.2 regulations as well as 
SOX, DIACAP, and FISMA automated 
monitoring. vCompliance 1.1 uses Trust- 
Zones technology to provide security and 
compliance for virtual data centers, both 
public and private. 

■ Elcomsoft iPhone Password Breaker 

ElcomSoft announced updates to its 
iPhone Password Breaker, a password 
recovery tool designed to unlock any 
encrypted iPhone, iPad, and iPod touch 
backups. The main new feature is sup- 
port for iOS 4, although there are more 
than 100 new features. iPhone Password 
Breaker is a GPU-accelerated tool. 

■ Ensim Unify Enterprise Edition v2.8 

Ensim announced the availability of a 
version of its policy-based enforcement 
engine, Ensim Unify Enterprise Edition. 
Version 2.8 helps enterprises gain more 
control in order to enforce compliance 
and security directives with features such 



as Role Administration and Security, 
User Management Updates, and a tool 
for Windows 7 compatibility for pass- 
word reset. 

■ Exar DX 1700 Series 

Exar introduced the PCI Express-based 
DX 1700 Series cards, which are capable 
of simultaneously hashing, encrypting, 
and compressing both network and storage 
data. Designed for the SOHO to enterprise 
markets, the offering supports between 
100 and 800MBps throughputs. The cards 
will be available by the end of July. 

■ eEye Digital Security Retina 

eEye Digital Security announced inte- 
gration of its Retina vulnerability man- 
agement solution with Agiliance's 
RiskVision IT-GRC reporting capabili- 
ties. The integration is designed to help 
simplify IT compliance and risk manage- 
ment. Retina uses nonintrusive scanning 
to protect servers, databases, networking 
devices, laptops, printers, and other net- 
work-connected assets. 

■ ManageEngine ADSelfService Plus 

ManageEngine announced an update to 
ADSelfService Plus, its Web-based self- 
service Active Directory password reset 
portal. Features include the ability to 
enforce password histories, enable multiple 
administrators to log in to the application, 
and schedule phased end-user password or 
account expiration notifications. It also 
includes graphical identification and 
authentication customization. 

■ LogRhythm 

Log Management/SIEM Platform 

LogRhythm announced an updated 
version of its integrated Log Manage- 
ment/SIEM platform, which is a program 
that's designed to eliminate information 
security blind spots by providing holistic 
visibility and relationship mapping of net- 
work activity. LogRhythm now monitors 
system processes and network connec- 
tions on end points, provides geolocation 
of hosts, and maps relationships through 
network visualization. 

■ Novell Sentinel Log Manager 1.1 

Novell released the Sentinel Log 
Manager 1.1, the first log management 
program available as a software appli- 
ance, the company says. SLM 1.1 comes 
as a preconfigured package all set to run 



Novell 



on a virtualized system in the data cen- 
ter. The image contains an OS (SUSE 
Linux Enterprise 11), middleware, and 
the SLM application itself, ready to run 
on industry standard platforms, Novell 
says. Featuring search, reporting, and 
data collection abilities, SLM 1.1 helps 
the data center prove compliance with 
relevant regulations. At the same time, it 
aids security efforts through network 
event monitoring and remediation. 

■ Palo Alto Networks GlobalProtect 

Palo Alto Networks introduced Global- 
Protect, a product designed to secure 
remote endpoints faster and easier. Like 
other Palo Alto solutions, GlobalProtect 
tackles security issues through applica- 
tion-, user-, and content-based policies. 
Remote traffic is channeled through a 
secure tunnel and links to the nearest 
Palo Alto Networks firewall. 




Page 6 



Processor.com 



July 16, 2010 



PRODUCT RELEASES 



■ Q1 Labs QRadar SIOS 

Ql Labs introduced QRadar SIOS 
(Security Intelligence Operating System), 
which is a common framework for aggre- 
gating, storing, filtering, analyzing, and 
reporting on all security intelligence 
telemetry. It combines monitoring and 
analysis capabilities and is easily scaled 
for large infrastructures. 

■ Sepaton S2100-ES2 Series 

Sepaton released the S2100-ES2 
Series, a data protection appliance for 
cloud computing. The solution includes 
secure multitenancy, DeltaStor dedupli- 
cation, and Storage Pool features, 
Sepaton says. Using version 5.4 of the 
company's software, the S2100-ES2 
series is marketed as a cost-effective 
solution for both cloud providers and the 
enterprise with a cloud infrastructure. 

■ Skybox Security Skybox View 5.0 

Skybox Security released Skybox View 
5.0, a firewall management product port- 
folio that strengthens cyber security. 
Features of Skybox View 5.0 include 
change assurance workflow and change 
tracking capabilities, enhanced rule com- 
pliance analysis, streamlined platform 
administration, and scalable network 
mapping. The portfolio contains three 
products designed for enterprises and 
midsized organizations. 

■ Trend W\cro InterScan 

IVIessaging Security Virtual Appliance 8.0 

Trend Micro released version 8.0 of its 
InterScan Messaging Security Virtual 
Appliance, a hybrid SaaS email security 
solution. It provides the advantages of 
both cloud-based security and VMware- 
compatible virtual appliances, the com- 
pany says. The solution's aim is to stop 
spam and email threats before they con- 
sume network and employee resources. 

■ WatchGuard Technologies 
Reputation Enabled Defense 

WatchGuard Technologies unveiled 
the Reputation Enabled Defense cloud 
security service used with WatchGuard 
XTM or XCS security appliances. 
Reputation Enabled Defense scores sus- 
picious URLs as unknown, good, or bad 
in order to prevent attacks from viruses, 
spy ware, key loggers, botnets, and similar 
threats. The unknown URLs are scanned 
by WatchGuard XTM or XCS to filter 
out malware; bad URLs are blocked. 
Reputation Enabled Defense is designed 
to increase Web browsing speeds 
because it doesn't require a full Web 
scan. The full URL reputation service 
addresses security integration and multi- 
functionality within enterprise networks. 
A one-year subscription starts at $155. 



(W)atchGuard 



■ WatchGuard Technologies SSL 560 

WatchGuard Technologies unveiled 
the WatchGuard SSL 560 appliance, 
which provides access to corporate net- 
works, applications, and data for up to 
500 concurrent remote and mobile work- 
ers. The WatchGuard SSL 560 features 
robust logging and reporting. Desktop 
Sharing and Remote Assist, deep device 
examination, and endpoint integrity 
checking. The WatchGuard SSL 560 
starts at $9,150. 



Servers 



■ Nixsys Legacy 0/S 

& ISA Slot Workstations & Servers 

Nixsys, a provider of custom-built 
rackmount servers, is offering companies 
seeking to update their computers while 
still using their legacy equipment two 
options to do so with its ISA Slot ($560 
and up) and Legacy 0/S ($300 and up) 
lines. The Legacy 0/S models are avail- 
able in micro, midtower, and 2U/3U/4U 
rackmount options. The ISA Slot models 
come in tower and 3U/4U options, pro- 
vide three or more full-sized ISA slots, 
and offer Intel Celeron or P4 processors. 
Both lines support Windows XP Pro- 
fessional, Win2000, Win98, Windows 
NT 4.0, MS-DOS, and other OSes. 
Additionally, Nixsys can build to other 
formats upon request. 




■ Oracle Sun Fire x86 Clustered Systems 

Oracle launched its latest Sun Fire x86 
Clustered Systems, which consist of rack- 
mount servers, blades, and a 10-Gigabit 
Ethernet cluster fabric. The new offerings 
support both Oracle and non-Oracle 
workloads, reduce management complex- 
ity, deliver record-breaking performance, 
and boost operational efficiencies. 

■ Super Micro Computer 

AMD Socket C32 Server Solutions 

San Jose, Calif., -based Super Micro 
Computer announced a family of servers 
optimized for the new Socket C32 AMD 
Opteron 4100 Series "Lisbon" processors. 
The new servers, which can be loaded 
with 35 -watt, six-core Opteron CPUs that 
consume only 5.8 watts per core, are 
aimed at data centers and IT departments 
wishing to minimize power budgets. 



Services 



■ SoftLayer Data Transfer Service 

SoftLayer announced a Data Transfer 
service for USB -compatible devices. The 
service is directed toward users wanting to 
transfer data or who have data they do not 
want to transmit over the network. Data 
Transfer is free for SoftLayer customers 
and can be accessed through a request 
form via the SoftLayer Customer Portal. 

■ SoftLayer Technologies 
Build Your Own Cloud 

SoftLayer Technologies released Build 
Your Own Cloud, an addition to the 
CloudLayer family. The service lets 
users create customized cloud servers to 
improve application performance, cost 



efficiency, and availability. Features 
include customized CPU, RAM, and 
storage configurations; flexibility for 
scaling or modifying solutions; Web 
or portal ordering; and no fixed re- 
source packages. 



Storage 



■ Aleratec Hard Drive Duplicators 

Aleratec released the HDD Cruiser and 
HDD Copy Cruiser tower hard drive 
duplicator family, which ranges from 
$315 to $2,299. The line includes the 1:1 
and 1:5 HDD Cruiser and the 1:11 HDD 
Copy Cruiser. The drive duplicators sup- 
port Secure Erase Sanitization, which 
scrambles each drive's contents 60% 
faster than overwriting, Aleratec says. 

■ Arkeia Software vStorage Backup Agent 

Arkeia Software introduced its vStorage 
Backup Agent, which supports VMware 
vSphere 4 and VMware Infrastructure 3 
through its application programming 
interface. The product can back up data to 
disk, tape, or from disk to tape (either 
locally or via WAN). As the last install- 
ment of Arkeia Network Backup 8.2, it 
joins backup agents for Microsoft 
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Exchange, SharePoint, and SQL Server, 
in addition to agents for Novell Group- 
Wise, eDirectory, and iFolder. The Arkeia 
vStorage Backup Agent is currently avail- 
able with prices starting at $1,500 per 
VMware vSphere server. 

■ Exar BitWackr C Series 

Exar announced its BitWackr C Series, 
which is a hardware-accelerated backup- 
to-disk data compression product for 
Microsoft Windows Server 2008 servers 
and appliances. In conjunction with pop- 
ular backup software, the BitWackr C 
Series can reduce both backup-to-disk 
capacity requirements and the amount of 
time it takes to create the backup. 

■ Isilon OneFS 6.0, SmartPools & 
InsightlQ 

Isilon announced the OneFS 6.0 scale- 
out storage operating system as well as 
SmartPools and InsightlQ software 
applications that provide in-depth data 
management. SmartPools creates a single 
file system and single point of man- 
agement, and InsightlQ is an analytics 
platform that helps administrators maxi- 
mize efficiency. 



■ LabTech Software LT Backup 

LabTech Software released LT Back- 
up, a backup and disaster recovery tool. 
LT Backup makes it easy to deploy, 
automate, and manage client backup and 
recovery. The tool is equipped with auto- 
mated recoverability tests that run daily 
to test backup restorations, and it fea- 
tures new image-based backup, which 
captures snapshots of the entire system. 

■ Nirvanix hNode 

Nirvanix released the hNode, which 
delivers on-premises, fully managed 
cloud storage for secure and rapid stor- 
age of large file-based datasets, and pro- 
vides the flexibility to comply with even 
the most stringent corporate or legal data 
retention policies by containing data 
within a data center while enabling 
transfer to the Nirvanix Storage Deli- 
very Network. 

■ Oracle Sun Storage 7000 

Oracle released its latest Sun Storage 
7000 Unified Storage System product 
line, which now features built-in inline 
data deduplication, inline data compres- 
sion, 4Gbps and 8Gbps Fibre Channel 
protocol support, multiple storage pools, 
and 1TB and 2TB SAS disk drives for 
twice the system capacity (576TB). 

■ QLogic FCoE ASIC 

QLogic released the FCoE (Fibre 
Channel over Ethernet) ASIC, which is 
used in the HP Virtual Connect Flex- 
Fabric lOGb/24-port module for the 
BladeSystem platform. Code-named 
"Bullet," the FCoE ASIC offers flex port 
technology, so it can support Fibre 
Channel, iSCSI, or FCoE data. 

■ QNAP Systems Turbo NAS 

QNAP Systems enhanced the Turbo 
NAS management software with 
firmware version 3.3. The update 
includes a multimedia application, sup- 
port for the QMobile App (for iPad, 
iPhone, and iPod touch), a firmware 
update feature, an ISO mount, and a 
resource monitor. The update also 
improves management of Apple Time 
Machine backup. 

■ Zmanda Cloud Backup 3.0 

Zmanda introduced the latest version of 
its Zmanda Cloud Backup offering, which 
is a desktop and server cloud backup 
product. ZCB 3.0 features enhanced geog- 
raphy control across data centers on three 
continents, support for international char- 
acter sets, optimized backup of Microsoft 
Exchange data, support for cloud-based 
disaster recovery, and Internet bandwidth 
management. ZCB 3.0 starts at $0.15 per 
gigabyte per month. 
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GREEN TECH & TIPS 



Start With The Basics: Save Energy & Money Right On The Desktop 



BYRODSCHER 



You HAVE A DUAL responsibility to pursue "green" technology 
whenever and wherever possible. First, as a good corporate 
citizen, you want your company to improve the environment 
if it can; failing that, you certainly want to do as little harm 
as possible. 

Secondly, there are dollars involved here: Green technology 
may require more of an initial investment, but it often results 



in long-term savings. So, in addition to your responsibility as a 
citizen, you have a fiduciary responsibility to see that the com- 
pany invests its money wisely; green tech is a wise investment. 

One simple key to both types of return, environmental and 
fiduciary, lies in the equipment on and around employees' 
desktops; there's energy — and money — to be saved there by 
"going green." 




Computers & Printers 

The DoE (Department of Ener- 
gy) estimates that it costs about $80 
per year to run a desktop computer 
and monitor in a business environ- 
ment. A small business with 50 
workstations thus spends about 
$4,000 every year simply running 
its computers. Save money, ener- 
gy, and the environment by invest- 
ing in Energy Star-compliant PCs, 
monitors, and printers. (Ditto for 
copiers, lights, and other office 
equipment.) You can save addition- 
al energy by turning the equipment off at the end of the day; in most cases, 
the IT staff can remotely "wake up" computers if they need to install 
upgrades or run backups. 

Printers, besides saving energy with Energy Star-compliant electronics, 
can also impact the environment positively when used with recycled 
papers, environmentally friendly inks, and ink cartridges made of recycled 
plastics. Use those when possible, and print only when necessary. 
(Wondering if your printer manufacturer offers eco-friendly paper, car- 
tridges, and ink or toner? Check the manufacturer's Web site; also, take a 
look at www.thedailygreen.com/going-green/tips/2078.) 



Many laser and Inkjet printers have earned 
the Energy Star seal of approval by meeting 
EPA energy-efficiency guidelines. 



Lighting 

You're wasting money and energy if 
you're not using CFLs (compact fluores- 
cents). They last up to 10 times longer, 
produce only 10% of the heat, and use 
about 25% of the energy of a compara- 
ble incandescent bulb. They're more 
expensive to purchase initially, but the 
DoE estimates that switching will ulti- 
mately save you about nine times the 
original cost of the CFL bulb. 



A compact fluorescent bulb can 
ultimately save many times Its cost, 
according to the Department of Energy. 



J L 



Heating & Air Conditioning 

Heating and air conditioning 
represent a large percentage of 
most companies' energy ex- 
penditures, and inefficient 
electronic devices (such as 
computers that are not 
Energy Star-compliant) 
and incandescent bulbs 
both contribute to heat 
that must then be coun- 
tered by your air condi- 
tioning system. 

David Roylance, president 
and COO of Dallas-based Save- 
OnEnergy.com, notes that inefficient use 
of HVAC resources can cost you, explaining 
that inattention to climate control settings — 
especially during business downtime or non-office 
hours — contributes to excessive energy usage just 
as the use of inefficient equipment does. 

Pay attention to your HVAC expenditures, and 
you'll save energy and money and impact the 
environment that much less. 




Automated Systems Design, Inc. 



ICLD-ITS 




ICAT ITS 
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iGLO'lTS'** Fiber Optic Module 



iCAT-ITS^" 600MHI 
Cat6E Enhanced Cable 



For complete list of available products contact 
ASD® Sales @ 1-800-CABLING 



For over 20 years ASD® has provided complete design, 
engineering and nationwide project management services. 
Join in with those who have found the same- highly sought 
after- excellence provided in our services carry over to 
our products. 

Designed from all aspects of the cabling industry 
including RCDDs, installers, end users and engineers, we 
know those choosing to partner with ASD® will benefit from 
the best in the business! 




www.asd-usa.com 
1-800-CABUNG 
sales@asd-usa.com 
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Efficiency of Your Data Center? A 
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With Device Monitoring 

> Rack Level Povver Management 

> Outlet Power Monitoring (POPS) 

> Input Power Monitoring 

> Environmental Monitoring 

> Outlet Groups 
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Solutions for the Data Center 
Equipment Cabinet 
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Assess Your Defenses 



Continued from Page 1 
inadequate layers of defense. According to 
Brian Beal, information security officer at 
Sensiba San Filippo (www.ssfllp.com), 
that client has since spent months and 
countless man-hours trying to recover 
from the overnight theft. 

"Here is how the attack occurred: The 
client allowed open, unfiltered Internet 
access for employees, which resulted in a 
payroll administrator' s PC getting infected 
with a banking Trojan," Beal explains. 
"This payroll employee then logged in to 
the company's online bank account, which 
was an administrator-level account, allow- 
ing the attackers to gain access to the 
account. The attackers then changed the 
password of the payroll employee's 
account and set up multiple new admin- 
level accounts, from which they trans- 
ferred the $450,000 out to accounts set up 
at other banks." 

Several security downfalls led to the 
successful attack, Beal says. These 
included open Internet access that per- 
mitted employees to visit non-business- 
related Web sites; elevated privileges, 
which go against the recommended secu- 
rity principle of "least privilege," in 
which users are granted enough rights 
only to do their jobs; and lack of user 
awareness. "Employees need to be made 
aware of the vulnerabilities and threats 
facing company assets, and they need to 
know what their responsibilities are in 
the protection of those assets," Beal says. 



the estimates of potential damage. From 
there, the assets should be prioritized by 
importance, the enterprise should decide 
on cost-effective controls to reduce the 
risk to those assets, and assessment 
results should be documented to help 
facilitate an action plan to implement 
new polices and appropriate controls, 
Beal says. 

Seek Outsiders 

When evaluating your defenses, rely- 
ing on personnel who are overly familiar 
with the systems might not be the best 
tactic. Instead, it can make sense to 
employ an outside auditor — or attacker, 
if you will — to test those systems and 
look for leaks. Joseph Pedano, vice pres- 
ident of data engineering for Evolve IP 
(www.evolveip.net), notes that although 



"If this particular payroll admin had been 
trained to understand the risks of visiting 
non-business-related Web sites, perhaps 
they could have avoided the site that led 
to the Trojan infection." 

Beal recommends conducting an infor- 
mation security risk assessment to deter- 
mine which assets are mission-critical 
and to address threats that could impact 
your enterprise. This assessment should 
include the identification of critical 
assets (such as systems, data, and pro- 
cesses), identification of likely threats to 
those assets (such as theft, intrusion, 
fraud, fire, and vandalism), and determi- 
nation of the values of these assets and 

Expand Your Vision 

The process of evaluating your security defenses isn't simply a device for putting out fires or sat- 
isfying customer complaints about specific system issues. These assessments are tied to a 
greater worth that ensures that the entire business can operate as expected and that its reputa- 
tion remains intact, says Phil Lieberman, CEO of Lieberman Software (www.liebsoft.com). 

"IT needs to understand that there is a substantial business value to examining security of their 
workstations and servers on a regular basis and [that] the implementation of enterprise security 
protections, monitoring, and password management can actually make their lives easier as well as 
protect the assets and reputation of the company or organization they work for," Lieberman says. 

The investment of time, money, and resources into security is akin to insurance, he adds, except 
that it actually removes plenty of workload and IT-related uncertainty. But although technology is 
essential, good security also relies on solid organizational practices. Lieberman points to GRC 
(governance, risk management, and compliance) frameworks for details on these practices, but 
companies must first commit and agree that there is value in better security— from both organi- 
zational and investment perspectives. 



these assessments might be costly, they 
accomplish two important things. 

"They will give you a present-day 
assessment of where your security issues 
are, and most times, the auditor will give 
you suggestions on how to improve upon 
the issues they have identified," Pedano 
says. "Most assessments provide an 'un- 
jaded' view into your enterprise and are 
easier to work with than an internal audit 
that might take the 'well, that's the way it 
is' approach." 

Conducting longer-range assessments 
can also help to determine your overall 
security level. Beal recommends tracking 
security-related incidents (such as mal- 
ware infections, incident-related down- 
time, and firewall-repelled attacks) over a 
six-month period. After any additional 
security measures are implemented after 
this six-month period, IT personnel can 
compare the following six months to the 
original assessment — and hopefully see a 
decrease in incidents or problems. Beal 
says this tracking process can occur 
through the use of the IT help desk ticket- 
ing system so that companies don't have 
to incur additional assessment costs. 

Finally, don't forget user awareness 
training — a method that could have pre- 
vented Beal's client from losing hundreds 
of thousands of dollars. Evaluation 
should also occur here by following up 
on the training with surveys or inter- 
views. By doing this over time, Beal 
says, security personnel can determine if 
there is an elevation of security con- 
sciousness as well as if the training is 
effective or if its message or delivery 
method needs to be altered. 



Third-Party Software Support 



Continued from Page 1 
developed by the customer. That mainte- 
nance can be done by the customer or a 
third-party maintainer." 

Application maintenance includes 
"development, ongoing maintenance, 
enhancements, and testing of enhance- 
ments," says Refael Keren, an analyst with 
Info-Tech Research Group. It covers the 
"development of new features for com- 
mercial or custom software." Companies 
outsource development and enhancement 
because they don't have the staff, Keren 
says. The key reason, however, is "to gain 
access to expertise and additional re- 
sources or to speed development." 

The second type of maintenance, which 
is highly controversial, is product mainte- 
nance and support. It is specific to the 
enterprise resource planning software of 
Oracle and SAP, and that includes the 
PeopleSoft, JD Edwards, and Siebel 
acquisitions of SAP. "It's the human 
resources modules primarily," Igou says. 
The maintenance of these products "is the 
purview of Oracle and SAP," he says. "It 
includes updates and support when there 
are problems." 

Virtual Monopoly 

Oracle and SAP have established virtual 
monopolies on the support and maintenance 
of their products. "The majority of mainte- 
nance is bug fixes, patches, and updating for 
new platforms and for international use," 
says Vinnie Mirchandani, founder of Deal 
Architect (www.dealarchitect.com), a firm 
that negotiates various types of IT contracts 
for clients. 

"The second type of maintenance con- 
cerns the regulatory changes, which the 
government defines, so it's public domain 
stuff," Mirchandani says. "The third type 
of maintenance involves new features. The 
software companies spend about 2 to 5% 



of their budget on new features, so it's only 
a small portion of what the software pub- 
lisher delivers. By version six or seven, 
customers realize this." 

Mirchandani also points out that the 
annual maintenance profit margin of 17 
to 30% of the official value of the soft- 
ware license is much too high, especially 
when most customers don't use all of the 
product capabilities. "Maintenance fees 
have no relationship to the actual value," 
he says. 

Software vendors have also automated 
or offshored most of their support, he 
says. "Buyers know the costs there are 
one-third to one-half of the cost of doing 
it in the United States," Mirchandani 
says. User communities may also serve 
as the product troubleshooters and prob- 
lem-solvers, and that's free to the soft- 
ware vendor. 

The result of these realities? Customers 
no longer want to pay those annual prod- 
uct maintenance fees. 

Weighing The Risks 

Third-party maintenance for both appli- 
cations and products has consequences. If 
a customer wants to hire a company for 
application development and enhance- 
ment, it can't do it overnight. 

"You don't just switch service providers 
to reduce costs," Keren says. "To succeed 
in application outsourcing, you must 
develop a long-term relationship with the 
provider." Of course, first the customer 
must find and evaluate a provider, which 
can be difficult. 

Consequences for using third parties for 
product maintenance are much higher than 
for using them for application mainte- 
nance, though. "If they leave Oracle and 
SAP, customers save a lot of money," 
Igou says, adding that third parties charge 
about half of what the vendors charge. 



"But you don't get updates, and you must 
keep your environment very stable," he 
says. "For example, you must keep the 
same operating system because the prod- 
uct was designed to work with that operat- 
ing system." 

What third-party providers can't han- 
dle are problems with the source code, 
because they aren't privy to it. For- 
tunately, "most software problems are 
configuration problems or some change 
by someone, such as a change in scripts. 
This is ordinary IT maintenance, and 
third parties can handle this stuff," 
Igou says. 

Third-party maintainers can't write 
patches or upgrades, either, but they are 
able to do the regulatory updates, which 
must be done for legal compliance. Some 
third parties just focus on the updates, 
Igou says. "Others do more full-fledged 
stuff, including consulting." 

Those aren't the big risks for using 
third-party product maintenance providers, 
however. The software vendors "are mak- 
ing every kind of threat possible to scare 
buyers," Mirchandani says. "They are 
starting to [tell buyers] 'If you leave us 
and come back, you must pay us in full for 
every year you were gone or we'll never 
sell you a piece of software again.' They 



are also starting to sue the third-party 
maintainers." Such lawsuits also present 
risk for the customer. 

Mirchandani believes that the govern- 
ment will eventually step in to eliminate 
the product maintenance monopolies. If it 
doesn't, he thinks customers will join 
together in protest and force the issue. 

Market & Due Diligence 

Because the business of third-party 
product maintenance companies comes 
from legacy versions of Oracle and SAP 
products, Igou says the market segment is 
tiny. "The vast majority of customers stay 
up on the software. The customers are 
those who have decided to stick with one 
version," he says. 

Mirchandani says "it's not a very 
established industry, and the companies 
constantly live in the shadow of lawsuits 
from vendors." The small size of the 
industry and the threat of lawsuits mean 
"the market is not as well-defined or as 
transparent as it could be," he says. "It's 
harder to do due diligence. So the 
biggest thing to do is ask for a bunch of 
references, test drive them on a couple of 
modules or for a short period of time, 
look at their facilities, and have your 
lawyers look them over." E9 



Oracle & Rimini Street Sue Eacli Otiier 

In January, Oracle filed a lawsuit against third-party product maintenance provider Rimini 
Street, claiming that the Las Vegas-headquartered company had stolen its intellectual prop- 
erty. Then Rimini Street countersued for, among other things, copyright misuse, defamation, 
and unfair competition. 

"If Oracle prevails, the most that would happen is that Rimini Street would have to change its 
practices to not help customers download product updates, but it could still help them with 
installation," says Bob Igou, research director for software support services at Gartner. 

And if Rimini Street wins? "One court acknowledges that the customer has a choice," says 
Vinnie Mirchandani, founder of Deal Architect (www.dealarchitect.com). However, he adds, 
"One court decision won't change the software vendors' behavior much." 
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Slash energy costsl 
Improve the effectiveness of 
hot aisie/cold aisle Isolation. 
AirBlock users report 
reductions in energy 
consumption of as much as 
50%, A system can pay 
for itself in months! 



PflSIMPLEX 



The AirBlock product line Includes transparent 
curtains, hard panels and door options. Create a 
solution specific to your needs. 

Maximize airflow dynamics and increase the 
effectiveness of your hot aisle/cold aisle isolation. 

Each AirBlock system is custom designed for your 
specific data center application-including cold 
aisle isolation, hot aisle isolation, plenums, CRAC 
units and more. 




MovinCool CM25 



NEW PRODUCT 



hy Tessa Warner Breneman 



An Affordable, Energy-Efficient, Ceiling- 
IVIounted A/C Designed For Server Rooms 



By now you undoubtedly know that, 
with all your servers and other machines 
running nonstop, it's easy for your data 
center or server room to reach tempera- 
ture levels high enough to damage heat- 
sensitive equipment. Because damaged 
equipment is costly to fix and could 
result in data loss, you need a cost-effec- 
tive cooling solution to address tempera- 
ture issues in your data center. 

The MovinCool CM25 offers a total 
cooling capacity of 25,000BTU/h, making 
it the industry's first ceiling-mounted, self- 
contained air conditioner with that high of 
a cooling capacity, and its $6,995 price tag 
is lower than conventional solutions such 
as precision cooling systems. The CM25 
also provides a high sensible cooling 
capacity of 18,900BTU/h and is made 
specifically for server rooms and other 
environments with dense heat loads. The 
air conditioner boasts a SEER (Seasonal 
Energy Efficiency Ratio) rating of 14, due 
in part to energy-saving elements such as 
its variable-speed inverter compressor and 
inverter fan motors. The CM25 also boasts 
green features such as R-410A refrigerant 
and RoHS compliance. 

With a built-in mounting bracket, 
flanges, and vibration isolators, the CM25 



MOVINCOOL 

THE #1 SPOT COOLING SOLUTION 



is easy to install into any environment 
with all the standard tools you likely 
already have. Just 20 inches high, the 
CM25 is designed to fit above drop ceil- 
ings and in server rooms with limited floor 



MovinCool CM25 *' 

A ceiling-mounted air conditioner that provides an ener- 
gy-efficient cooling solution for data centers, server 
rooms, and other environments with high heat loads. 
$6,995 

space. And because it is self-contained, 
the CM25 won't need refrigerant connec- 
tions, further reducing installation costs. 

The wall-mounted controller, which 
comes standard on all CM25s, provides 
advanced communications, monitoring, 
and self-diagnosis, so it's easy for IT 
personnel to manage. Plus, it works with 
your fire alarm controls and connects to 
the building control system for safe and 
simple management. 



(800) 264-9573 
www.movincool.com 
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AVES TIME, 

SAVES EN ERG 




SAVES TH 



NVIRONMENT. 



Cyber Switching's new ePower family is targeted at data center 
managers searching for greener solutions which integrate rich 
features while providing unsurpassed reliability and great value. 

• Color LCD Touchscreen 

- Enhanced productivity - interactive screen allows for local management 

- Quick and easy setup - configure network access within 5 minutes with no laptop r 

• Cyber Breaker® the Virtual Circuit Breaker 

- "Trips" an individual outlet when the amperage exceeds a user-defined threshold 

- Limits overcurrent conditions to a single outlet, protecting equipment 

- More freedom with faster response times and user-definable trip curve 

• Individual Outlet Power Metering and Control 

- Utility-grade metering and control (±2% accuracy) 

- Track usage and reduce costs when enrolling in 
Utility Company Incentive Programs 

• Demand/Response Load Shedding 

- Proactively shed loads manually or enroll in AutoDR program 

- Protect your mission-critical applications during Demand/Response events 

• Two High-Speed USB ports 

- External peripherals: environmental sensors, web cams, flash drives, hubs, etc. 

• Slimmest PDU with Individual Outlet Metering on the Market 

- Product depth only 2.25 inches thick 

• 60+ High Density PDU Configurations 

- Wye and Delta 3(1) inputs from 4.2 kW to 27.3 kW 



Contact: sales@cyberswitching.com or (888) 311-6277 to place your order or for more information 




Some Of Our Valued Customers Include: Adobe Systems • ANL • Blue Cross Blue Shield 
Brocade Communications • Cisco Systems • General Dynamics • Department of Defense 
^^g^^^ Extreme Networks • Hewlett-Packard • Intel • Jabil • NEC • Telenav • WebEx 

ePouier 

www.cyberswitching.com • (888) 436-9830 by CYBER@SWITCHING® 
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For more Upcoming IT Events, see page 3. 



ISSA San Diego 

Aug. 11 
San Diego, Calif. 
www.sdissa.org 



Soutliern New England 
SQL Server User's Group 
Aug. 11 
www.snessug.com 



AITP Washington D.C. 

Aug. 12, 6:30 p.m. 

Alfio's Restaurant 

4515 Willard Ave. 

Chevy Chase, Md. 
aitpwashdc.ning.com 



ISSA Northeast Ohio 
Aug. 12 
Cuyahoga County Library- 
Parma South 
7335 Ridge Road 

Parma, Ohio 
www.neoissa.org 



SQL Server Society of Las Vegas 
Aug. 12 

The Learning Center of Las Vegas 
777 North Rainbow 
Las Vegas, Nev. 
sssolv.com 



AITP Southwest Missouri 
Aug. 17 
Springfield, Mo. 
aitpspringfield.org 



ISSA St. Louis Chapter 
Aug. 17 
St. Louis, Mo. 
stl.issa.org 



Oklahoma City AITP Chapter 
Aug. 17 
Oklahoma City, Okla. 
www.aitp.org/organization/chapters 
/chapterhome.jsp?chapter=40 



AFCOM Central Ohio 
Aug. 18 
Columbus, Ohio 
www.afcomcentralohio.org 



AITP Omaha 

Aug. 19 
Omaha, Neb. 
www.aitpomaha.com 



ISSA Upstate South Carolina 
Aug. 20 
NuVox 
301 N. Main SL 

Suite 5000 
Greensville, S.C. 
www.upstate-issa.org 



ISSA Des Moines 
Aug. 23 
3920 SW Camden Circle 

Ankeny, Iowa 
www.issa-desmoines.org 



ISSA Baltimore 
Aug. 25, 4:30 p.m. 
Sparta Inc. 
7110 Samuel Morse Drive 
Suite 200 
Columbia, Md. 
www.issa-balt.org 



ISSA Inland Empire 
Aug. 31, 11:30 a.m. 
Coco's Restaurant and Bakery 
60 West Foothill Blvd. 
Upland, Calif. 
ie.issa.org 

- SEPTEMBER - 

Greater Wheeling AITP 
Sept. 8 
Wheeling, W.Va. 
www.aitp-wheeling.org 



ISSA Central Pennsylvania 
Sept. 8 

Harrisburg University of Science 
and Technology 
326 Market St. 
Harrisburg, Pa. 
centralpenn.issa.org 



ISSA San Diego 

Sept. 8 
San Diego, Calif. 
www.sdissa.org 
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Today's Biggest 
Security Threats 

Danger Could Be Just Around The Corner 
If You Don't Stay Abreast Of New Issues 



Key Points 



by Carmi Levy 

At a time when threats 
against enterprise infra- 
structure are increasing 
hke never before, IT secu- 
rity decision makers are 
challenged by the rapidly 
changing nature of these 
threats. Using conventional 
tools and processes to 
protect the perimeter is 
no longer enough as 
applications and data 
migrate to cloud- 
based and mobile 
platforms. IT shops 
that aren't rethinking 
the threat environment 
are leaving themselves unnecessar- 
ily vulnerable. 

Traditional firewalls, for example, are 
unable to keep pace with new forms of 
attack that target applications instead of 
operating systems and hardware. The 
gradual migration of enterprise function- 
ality outside the firewall only adds to 
the challenge. 

"Social media, blogs, wikis, video, 
mobility, AJAX, and file sharing are just a 
few of the Web 2.0 applications that are 
commonly used, yet not secured by tradi- 
tional firewalls," says Jonathan Hoppe, 
president and CTO of Cloud Leverage 
(www.cloudleverage.com). "In addition, 
DDoS threats and botnets become more 
prevalent all the time and can cripple tra- 
ditional firewalls with limited capacity." 

Clouds In The Forecast 

Cloud-based solutions, in particular, are 
pushing the bounds of conventional secu- 
rity methodologies. 

"This technology has proved incredibly 
valuable to enterprises worldwide in manag- 
ing capacity, but because of the fact that it 
resides outside of corporate firewalls, it is 
very difficult to protect," says Hoppe, who 
adds that as cloud-based implementation 
continues its mainstream push, enterprises 
will look to cloud-specific IPS and firewall 
solutions as a second layer of protection. 

Behaviors also continue to rank high as 
potential security weaknesses. Unfor- 
tunately, insider threats are often mistak- 
enly overlooked by outward-focused IT 
security leadership. Terry Cutler, a premi- 
um services engineer with Novell Canada 
(www.novell.com), says end users in 
many organizations are typically given too 
much access for their respective roles. 
Even if their subsequent explorations 
aren't malicious. Cutler says they can rep- 
resent the most significant threat to the 
organization. And if they are malicious, 
employees using this data for alternative 
purposes can damage the organization's 
bottom line and credibility. 

More Mobile, Less Controlled 

As more mobile devices — often pur- 
chased by employees instead of pro- 
cured centrally through IT — connect to 
corporate infrastructure, the risk grows. 




Traditional firewalls are beconning inade- 
quate as a growing percentage of corpo- 
rate IT resources rely on the Internet and 
cloud-based resources. 

Increasingly capable snnartphones open 
up new avenues for security vulnerability, 
nneaning conventional nnanagennent tools 
and processes— built for traditional 
PCs— are inadequate. 

• Employees using social media 
can make it easy for hackers 
to target individuals with cus- 
tomized spearphishing attacks 
or to use the employees' infor- 
mation to spread malware and 
build botnets. 



Employees typically have much greater 
control over installing and configuring 
apps on mobile devices than on average 
IT-managed corporate PCs. 

"Consumers are also increasingly 
accessing the Internet on these devices to 
check bank balances and conduct e-com- 
merce transactions," says Ansh Patnaik, 
director of industry solutions at ArcSight 
(www.arcsight.com). "In other words, 
smartphones are approaching desktops in 
terms of value to cybercriminals while 
protection measures are much weaker. 
That's why many experts predict that 
mobile malware will hit hard this year." 

The increased need for employees to 
self-manage Internet-based resources — 
functionality that was once IT's exclusive 
domain — increases the potential number 
of incursion points. 

The Rise Of Anti-Social Media 

Greater use of social media tools at all 
levels of the typical organization also spells 
bad news for IT security. Hackers are lock- 
ing in on rising rates of participation in ser- 
vices such as Twitter and Facebook to build 
customized "spearphishing" attacks. Cutler 
cites an example of employees attending a 
conference who tweet that they're glad to be 
home. Hackers could then use that informa- 
tion to email them a link to pictures taken at 
the event. The potential for click-through is 
much higher because it doesn't seem to be 
coming from a stranger. 

Cutler says this is representative of new 
styles of attacks where a hacker uses 
detailed information about his target to 
improve his odds for success by crafting a 



compelling email message 
and Web page. The social 
media threat also extends 
beyond socially engi- 
neered attacks. 
"Cybercriminals are 
leveraging the socially 
viral nature of these net- 
works to spread malware 
and convert hosts into bot zom- 
bies," says ArcSight' s Patnaik. 
"The continued increase in the use of 
social networks at work makes Internet- 
facing desktops inherently vulnerable and a 
conduit for cybercrime." 

Threats Get Quieter 

The nature of attacks is also changing. 
Gone are the days of big-bang incursions. 
The TJX data breach that exposed more 
than 45 million credit and debit card num- 
bers went undetected for well over a year. 

"We used to know when bad things 
were happening because it'd be a major 
network event, such as outages, failures, 
[or] traffic spikes," says Matt Jonkman, 
founder of Emerging Threats (www. 
emergingthreats.net), an open-source com- 
munity project that creates intrusion detec- 
tion signature and rule sets. "Unfortunate- 
ly, now the attackers intentionally stay 
extremely quiet. The pain will come in the 
infections that have been resident for 
weeks or months. Recovering from these 
breaches and identifying the information 
and credentials that may have been com- 
promised is a herculean task." 

Preventing those breaches in the first 
place is especially critical as the need to 
protect confidential customer and stakehold- 
er data continues to escalate. CDW's most 
recent Threat Prevention Straw Poll high- 
lights data loss as the main threat that's 
attracting most organizations' focus. 

"Data loss is possibly the biggest secu- 
rity-related threat," says Stan Oien, man- 
ager of security solutions for CDW (www 
.cdw.com). "Whether it is from parties 
inside the organization maliciously taking 
or destroying information or simply 
broken operational processes that lead 
to data loss through negligence, the threat 
is real." M 



New Forms Of Data Present New Vulnerabilities 

As federal stimulus funds work their way through industries such as health care and utilities, they may 
be creating new categories of data that are especially ripe for attack. 

"Medical identities carry a huge premium over other identities such as credit card numbers in the black 
market and will increasingly be targeted with old and new threats as they are digitized and used on the 
Internet," says Ansh Patnaik, director of industry solutions at ArcSight (www.arcsight.com). "Similarly, 
SmartMeters are being deployed at millions of homes and businesses [to closely monitor electricity 
usage] and introduce new opportunities for cybercrime as well as cyberterrorism." 

IT must categorize and protect these emerging forms of data to stay ahead of the evolving threat curve. 



I 



July 16, 2010 



Processor.com 



Page 1 1 



BayTech 



33 ftti^ MiU i, tu m 




DS-RPC Remote Site Management Series 




Device Management 

Console Port Management 

Remote Power Control 

True RMS Voltage/Current 

SNMP Support 

HTTP Power Control 

SSHv2/SSL Secure Access 

RADIUS Authentication 

Direct TCP Port Access 

Telnet/SSH Menu Device Selection 

Device Port Naming 

Individual Port Password Assignment 



BayTech's DS-RPC Remote Management Series provides secure and 
reliable management for your network, servers, and console ports. 
The DS-RPC combines the powerful combination of power manage- 
ment and console access. The cost-effective DS-RPC Series is meant 
for single connection applications. Security features such as SSH v2, 



RADIUS authentication, SNMP, and user access lists per port allow 
system administrators to remotely manage the DS Series with greater 
confidence and control. The selected host module provides either 
secure in-band or dial-up out-of-band access to your DS-RPC Series 
remote management solution. 



Bay Technical Assoc. Inc. 5239 A Avenue Long Beach, MS 39560 Tel: 228-563-7334 Fax: 228-563-7335 sales@baytech.net 



Processor Showcase 

The Processor Showcase provides a 
quick glimpse of data center products 
available from some of the industry's 
leading manufacturers. Each Showcase 
provides information on the product's 
most important features, complete with 
a product photo, to simplify your 
buying process. 



Product manufacturers and resellers: 

To list your products, call (800) 247-4880. 



Physical Infrastructure 



CW-24V5 Sentry Switched CDU 

Mixed Outlet 3-Phase 
415V/240V 

• Achieve greater efficiencies 
by bringing 3-Phase 415V to 
the cabinet and 240V to the 
devices 

• Single-power input feed; 24 
outlets per enclosure 

• Delivers upto21.6kW 

• Remote power management 

• IP access and security 

• SNMP traps and email alerts 

• Environmental monitoring 

• Ability to add an expansion 
module 
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Attention Manufacturers: 

Advertise Your Products 
In Processot's Showcase 
Product Directory! .^^^^''^I^ 


• Proven publication in 
business since 1979 | 

• Color picture [ 

• Detailed, editorial-style 
product description 

• Internet exposure via our 
Web site; Processor.com 






Call Us Today At 
(800) 247-4880 
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CS-3AVY Sentry Smart CDU 

/Provides reliable 3-Phase 
power distribution. Multiple out- 
let types distribute multiple volt- 
ages via 3-Phase 208V Wye 
power in-feed. 




High Density 
Multiple Voltage Outputs 
Input Current Monitor 
IP Access & Security 
SNMP Traps 

Environmental (Temperature 
& Humidity) Monitoring 
Branch Circuit Protection 
NEW! Linking for Smart 
CDU (Expansion Modules) 



Server Technology, Inc. 



Server Technology Inc. 

(800) 835-1515 
www. se r ve rtec h . co m 
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CS-2HD2/HDE Smart Power Monitor 

Easily add input current load and power monitoring to any 
existing cabinet 

Quickly added to SAN's or other cabinets that do not have 
any power monitoring capabilities 
Measure aggregate current draw on each power circuit 
IP access and security/Environmental monitoring 
Provides automated SNMP-based alarms or email alerts 
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Server Technology Inc. 
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Magnext Ltd 



MAGNEOT 



7099 Huntley Rd, Suite 104 1 
Columbus, OH 43229 DATA BACKUP SOLUTIONS 

NEW & REFURBISHED AUTOLOADERS & TAPE LIBRARIES 
UPGRADE PACKAGES FOR HIGHER PERFORMANCE & CAPACITY 
TAPE LIBRARY REPAIR SPECIALISTS - STOCK lOOO'S OF PARTS 
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LTO • DLT • SDLT 
9840 • 9940 • TIOK 

Magnext stocks tape drive 
modules for your tape library 

Call for best pricing! 

Committed to providing high-value, high-quolity, products to the IT marketplace 



Toll-free 888-NOW-TAPE 
www.magnext.com 



614-433-0011 
info@magnext.com 
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PC Market 
Expected To Show 
Significant Growtli, 
Slilfts Tills Year 

In the first quarter of this year, global PC 
sales had a respectable 27.1% year-over- 
year growth, according to IDC. The research 
company predicts PC shipments to increase 
by 19.8% this year. IDC's Worldwide Quar- 
terly PC Tracker predicts such market trends 
in a five-year quarterly forecast encompass- 
ing desktop PCs, notebooks, tablet PCs, 
netbooks, and more. IDC says total PC 
shipments this year will equal 354.8 million 
units, compared to last year's 296.1 million 
units shipped. 

Fueling The Growth 

Unlike in 2009, higher-priced items are 
dominating the PC market this year, accord- 
ing to IDC. Mininotebooks and netbooks 
were the driving force for the computer mar- 
ket throughout the recession; however, this 
year, IDC predicts that mininotebook sales 
will lessen, with a total percentage of the 
PC market expected to stay below 12%. 

If IDC's forecast proves accurate, main- 
stream notebooks will dominate global PC 
shipments for the next few years. This year, 
portable PCs are expected to secure a 
28.6% sales increase worldwide and a 
23.8% increase in the United States alone. 
Portable PCs will hold a whopping 70% 
share of the total PC market (both con- 
sumer and commercial segments) by 2012, 
according to IDC. 

The popularity of all-in-one PCs, e-readers, 
and tablet devices must also be taken into 
account when looking at the driving force 
behind the rise in PC shipments. Desktop 
PCs experienced a significant drop in sales 
last year, resulting in a 12.3% decline. With 
the popularity of the all-in-one PC, IDC pre- 
dicts worldwide desktop PC sales will have 
a growth rate of slightly more than 8% this 
year. IDC also credits enterprise PC up- 
grades for the improved sales of desktops 
and notebooks. 

The forecast shows "emerging regions" are 
the anchor for much of the PC market 
growth ahead. Emerging regions experi- 
enced a 37% growth in the first quarter of 
this year compared to first quarter sales last 
year, which is a record high. Of the 354.8 
million units expected to ship this year, IDC 
expects the United States will account for 
79.9 million of those units. 

byAntona Beckman 
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Security Spending Strategies 

SMEs Must Determine Where & How Much To Invest Without Overkill 



by Bruce Gain 

Many enterprises in 
North America will be 
able to reduce their 
spending on security by 3 
to 6% of their overall IT 
budgets by the end of 
2011, according to a report 
issued by analyst firm 
Gartner last month. Those 
enterprises that have 
"very mature" secu- 
rity practices in 
place or that have 
recently updated 
their IT security 
will be able to reap 




Key Points 



It is critical to quantify security budgets 
to be able to weigh them against the cost 
of not being protected for a particular 
security risk. 

Realize that the security budget will vary 
significantly according to the enterprise's 
sector and size of the overall IT budget. 

Remember that at the end of the day, 
hardware is easily replaced— it's valu- 
able data and information that need 
securing most. 



even more efficiencies, Gartner says. All 
told, the report says that IT security spend- 
ing will decrease as a percentage of IT 
spending overall from an average of 6% in 
2009 to 5% in 2010. However, even as 
enterprises are collectively able to invest 
more wisely and efficiently in security 
while reducing their budgets, determining 
how much to spend still varies according to 
a number of factors. 

"[Security spending] depends on how 
much was spent in the past to bring things 
up-to-date and to meet the enterprise's 
definition of 'due care' and 'commercially 
reasonable' security," says Victor S. 
Wheatman, a managing vice president at 
Gartner. "But we know of companies that 
spend far less — 1 to 2% — because they are 
at a level of maturity and have updated 
their systems, while other companies need 
to spend more to overcome vulnerabilities, 
to adjust after a merger, or to implement 
new programs as the economy improves. 
[If] an enterprise spends more or less than 
what is recommended, that is OK, but they 
should understand why." 

Deciding how an enterprise's IT securi- 
ty budget should be spent depends on sev- 
eral factors. 

The Industry Factor 

A Web-based business that derives rev- 
enue from paid ads but stores no cus- 
tomer data obviously has fewer security 
needs than an online retailer, a financial 
services firm, or a healthcare provider 
that retains very sensitive records. This is 
why IT departments' security spending as 
a percentage of their total IT budgets 
varies significantly. 

"It definitely varies considerably by 
industry," says John Baschab, managing 
director of the Provali Group. "Industries 
and organizations with significant practical 



requirements or compliance necessity for 
security have to spend a lot more, such as 
the financial services, healthcare, and gov- 
ernment [sectors]." 

Total IT spending needs to be factored in, 
as well. "If companies have relatively low 
IT budgets (overall), the percent spent on 
information security may be higher, and 
vice versa," Wheatman says. 

The Cost Factor 

In an ideal world, the person in charge of 
security would have a budget and the 
knowhow to select the most robust security 
protection devices and software available to 
ward off any conceivable threat, while also 
meeting or surpassing the standards of any 
regulatory compliance mandate in exis- 
tence. Unfortunately, very few enterprises, 
especially in the small to medium-sized sec- 
tor, have such a luxury — much less the 
knowledge to assess the myriad and ever- 
changing types of threats out there. As 
admins know all too well, threats can range 
from talented hackers who know how to 
penetrate the network to new variations of 
malware that can compromise customer 
data. Instead, the issue is to attempt to deter- 
mine the different known security threats 
and to weigh how much protection costs vs. 
the price of compromised data. 

"It is [necessary] to articulate how many 
records need to be protected or how much 
money a company can save. It comes to 
[assessing] another layer of security to 
protect information," says Joe Malec, the 
St. Louis chapter president of ISSA 
(Information Systems Security Associa- 
tion; www.issa.org). "A good example is 
cyber insurance, but sometimes it is diffi- 
cult for a company to spend half a million 
dollars a year to prevent $50 million a 
year of potential loss." 

It is also critical to assess the impact of 
security measures on business processes 
when setting the security budget. Too 
many VPN tunnels, passwords to retain 
and use, and other security measures can 
sap user productivity. "When balancing 
business needs with security, you don't 
want security to impact the business to the 
point where it impedes operations or their 
ability to make money, so then it ends up 
costing more money and becomes a harder 
sell, too," Malec says. 

However, particularly for smaller busi- 
nesses, many security holes remain 
unplugged due to budget constraints and 



because upper management does 
not understand how crucial certain 
security layers are, Malec says. It 
is critical to be able to demonstrate 
how the value of investments in 
certain security layers outweighs 
the risks. "There are a lot of politics 
in security. Different people per- 
ceive things differently about how 
value is added," Malec says. "You 
do some research and make 
some proposals and then try 
to sell it to the company 
where someone has to 
think about the impact on 
operations and cost — al- 
though they may not be con- 
vinced of the cost benefits." 



Understand What Needs Protecting 

It may turn out that your enterprise is 
overspending to protect assets that are 
really not worth that much or are covered 
under existing insurance policies that you 
may not have known about. As a rule of 
thumb, it is recommended to ensure that 
intellectual property is locked down prop- 
erly and given priority vs. throwing too 
much money at protecting hardware 
assets, says Clive Longbottom, service 
director for business process facilitation at 
Quocirca (www.quocirca.com). 

"Spending lots of money to physically 
secure a server, some storage, or mobile 
devices may seem to make sense, but for 
hardware commodities, trying to insure a 
lump of metal and silicon worth a few 
hundred to a few thousand dollars is miss- 
ing the point," Longbottom says. "If these 
are lost, stolen, or otherwise compro- 
mised, replacing them is a small cost." 

Rather, the data and information you are 
protecting is what's most important, he 
explains, and if done correctly, "security 
finally becomes what it should be: a means 
to enable things to be done, rather than a 
way of stopping things from happening," 
Longbottom explains. "For example, if a 
document has the right security, certain 
types of people within an organization will 
be able to open it, while others won't." 

Bringing in outside help from an auditor 
or another expert is a good source for 
objective expertise and is a way to gather 
concrete metrics to demonstrate to the 
enterprise why a certain security invest- 
ment is mandatory. "They can recommend 
options and budget ranges, as well as evalu- 
ate your spending plan," Baschab says. ^ 



Comparing Notes 

An objective way to check to see if your IT 
security budget is spent wisely is to com- 
pare and contrast what is in place vs. other 
enterprises in the same sector. There are so 
many so-called "must-have" security layers 
that it is very easy to lose sight of what may 
be missing, while studying the approaches 
of other enterprises can serve as a valuable 
point of reference. "Benchmarking against 
other companies and sharing information 
collegially can help determine if a company 
is approaching security from a due care/due 
diligence/commercially reasonable security 
context," says Victor S. Wheatman, a man- 
aging vice president at Gartner. 
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AlphaServer GS160 Model 16 

Base System for OpenVMS 

• DY-160CG-AA 

• One Alpha 21264 Processor 1224 MHz 

• Four Quad Building Blocks 

• One 14-Slot PCI Shelf 

• OpenVMS Operating System License 

ALSO AVAILABLE: 

• Additional 1224 MHz CPU w/SMP 

• Additional Memory 

• Additional PCI Shelves 

• Additional PCI Options 
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Authorized COMPAQ' Reseller 

WE WILL BUY YOUR USED HARDWARE! 




Information 
Technology 
Trading 



Experience to find you the 
right technology solution. 

AS/400 • RS/6000 • Sun Microsystems 
Storage • Tape Backup 



(877)715-3686 | www.itechtrading.com 




Thanks to DMD, we 
don't have to sit on 
our old computer 
equipment anymore. 



retrieve - refurbish ^ reuse - recycle - remarket 
We Purchase: We Offer: 



Computers/Laptops 
Networking Equipment 
Power/Environmental 
Tel eco m m u n ication s 
Complete Data Centers 
Printers 



Asset Tracking/Reporting 
Deinstallation/Packing/Transportation 
DOD Level Data Destruction 
Epa Recycling/Reuse 
Ongoing Support Plans 
Technology Refresh/Install Programs 



At DMD Systems Recovery, we remove the headache from asset 
disposal. We can manage the whole process from delnstallation to 
asset remarketing. We worry about data destruction, EPA 
regulations, logistics, and insurance so that you don't have too. 
Don't tie up your resources or take chances with you data or 
environmental issues. Call DMD today 



DMD SYSTEMS RECOVERY, INC. 
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Pegasus Buys, Sells and Offers Depot Maintenance 
& Flat Rate Repair On: 

KronosTime Clocks, Flat Panels, 
POS & Symbol, HHP, PSC,Telxon, 
Metrologic, Barcoding Equip 



We can supply any configuraton you 
need. If you have clocks installed and 
need a specific KOS version we can 
help you. Same is true on I/O Boards. 

Specialize in 420G, 440B, 
460F, 480F, 551, and 4500's 



Ethernet Daughter Board, Modem Option, Re 
mote Readers, Bell Relays, Master Sync, Bat- 
tery Backup Kit, Dual Reader, I/O Board, 
External Reader I/O Board, Touch ID f 
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I Security Testing Reveals Gaps 

NSS Labs, a company that does independent 
security software testing, found that security 
software from major vendors takes an aver- 
age of two days to block newly created Web 
sites that are designed to attack visiting com- 
puters. Additionally, NSS Labs indicates that 
as many as 50,000 new malicious programs 
are detected every day. The tests results 
were categorized under recommended, for 
the top-performing suites considered most 
reliable; neutral, for suites that performed rel- 
atively well and are fine for continued use; 
and caution, for suites that performed poorly 
and are not advised for use. Response times 
ranged from 4.62 to 92.48 hours. 

I Oracle Announces Profits 
Boosted By Sun Acquisition 

Oracle announced that Sun 
Microsystems, which the com- 
pany acquired in January for 
$7.5 billion, earned $400 mil- 
lion in non-GAAP operating 
income, as opposed to the 
$147 million loss it posted one 
year ago as an independent 
company. Additionally, 
Oracle President 
Charles 
Phillips 
said Oracle 
increased its 
application business 
by 5% in the past year 
and 60% in the past four years. 
Its net earnings reached $2.4 billion, which is 
up 25% from last year, with software license 
and product support revenues gaining 12% to 
total $3.4 billion. Oracle also posted a 15% 
revenue increase for all of fiscal 2010, with 
$26.8 billion; for fiscal 2009, Oracle reported 
$23.3 billion in revenue. 

I iPhone 4 Costs $188 To Construct 

According to new research from iSuppli, 
Apple's iPhone 4 costs about $188 to build. 
iSuppli took apart the phone and analyzed the 
estimated cost of each component. As with 
previous generations of the iPhone, Apple has 
tried to maintain a build cost between $170 
and $180. iSuppli estimates that the most 
expensive component is the screen, priced at 
$28.50. The device's NAND flash memory chip 
costs $27, and the A4 processor costs about 
$10.75 per chip; both are manufactured by 
Samsung. The retail cost of a 16GB iPhone is 
$199 with AT&T's two-year contract; purchas- 
ing the same device without a contract will set 
consumers back $599. 





I Study: Mobile Social Networks 
Can Leak Personal Data 

A newly released study from WPI (Worcester 
Polytechnic Institute) has revealed that mobile 
social networks are not retaining user privacy. 
Each of the 20 sites examined in the study 
reportedly leaked private information about its 
users to tracking sites. After examining 13 
mobile social networks, such as Flickr, Four- 
square, and Gowalla, and seven traditional 
online social networks, such as Facebook, 
Linkedin, and Twitter, the study shows that the 
leaked data in many cases contained a user's 
unique social networking identifier. With this 
identifier, third-party sites can connect the 
records they keep of browsing behavior to 
users' social networking profiles and in some 
cases can track users' locations. 
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The Latest Security 
Technologies & Trends 

A Look At What's Happening In The Security Field, From Technology To Strategy 



networking, when the lines between 
consumer and business applications of 
technology are increasingly blurred. For 
example, an employee might use Face- 
book to tout a new product or depend on 
Twitter to update clients. 

According to a recent application usage 
and risk report from Palo Alto Networks 
(www.paloaltonetworks.com), users often 
ignore the associated risks, such as noncom- 
pliance, data loss, and threat propagation. 




by Elizabeth Millard 

Just as threats are ever-evolving, so are 
security technologies and strategies to com- 
bat them. Enterprises face new foes every 
day (for more on the biggest enterprise 
security threats, see "Today's Biggest 
Security Threats" on page 10); fortunately, 
security experts are continually working to 
provide better protection for enterprises fac- 
ing security-related problems. Here's a 
glimpse at the latest in the security field. 

Current Landscape 

Traditional data loss 
prevention technologies 
have made a good deal of 
traction in the past year, 
notes Joe Yeager, a prod- 
uct manager at Lancope 
(www.lancope.com), a 
network performance and 
security monitoring firm. 

"Technologies to mon- 
itor data in motion using 
deep packet analysis 
have become quite good, 
and data-at-rest technolo- 
gies have employed quite 
sophisticated crawling 
and tagging techniques," 
he says. 

These types of technologies 
can reveal how much data is leaving the 
network on a person-by-person basis, bro- 
ken down by Internet destination. The 
analysis provides end-to-end visibility that 
can be used to baseline a normal amount of 
traffic for a given user and notify IT when 
that level is unusual, Yeager says. Also 
helpful is that the analysis can look for 
command-and-control traffic to root out 
botnet-infected hosts or find any unexpect- 
ed country-specific traffic. 

By getting a better hold on how traffic 
is flowing within an enterprise, IT can 
boost security and lower data loss risk, 
Yeager says. 

Importance Of Policies 

One major security trend isn't about 
technology tools at all; rather, it's the 
implementation of solid security policies 
that reach across an organization. This has 
become especially vital in an age of social 

Addressing The Threats 

Snnall to midsized enterprises should already be using standard security technologies, such 
as antivirus and firewalls, notes Randy Abrams, director of technical education at ESET 
(www.eset.com), a maker of antivirus software. But SMEs could also benefit from a vulnera- 
bility scanner to help ensure that their systems are patched. 

"All businesses should have an encryption solution so as to help prevent the compromise of data 
in the event of the loss of a device," he says. "Appliances that include intrusion prevention and 
detection as well as other technologies, such as network access control, antispam, antivirus, and 
other security features, can help a business with limited resources to more comprehensively pro- 
tect their environment." 

Also helpful is hiring a qualified security company that can audit the business and point out 
security exposure areas, as well as train employees in how to use tools more effectively. 
Abrams notes, "No matter how great the tool is, if you don't know how to use it, then its value 
is dramatically decreased." 



Key Points 



Data loss prevention technologies are 
being used more often, providing 
stronger protection for enterprises. 

Specific policies for application and 
device usage are on the rise and help to 
address security issues that crop up 
when the line between personal and pro- 
fessional gets blurred. 

Companies are now leaning toward a lay- 
ered, centralized approach with multiple 
security points within the network instead 
of just around the network. 



These risks can jeopardize a company's net- 
work, but in response, IT managers can't 
simply block "Enterprise 2.0 applications," 
according to Rene Bonvanie, vice president 
of worldwide marketing at Palo Alto. 

In order to enhance business productivity 
and mitigate security risks and compliance 
violations, Bonvanie says, IT should define 
and enforce policies that safely enable 
social networking applications. 

Policy enforcement is also increasingly 
necessary for use of mobile devices, adds 
David Lingenfelter, information security 
officer at Fiberlink (www.fiberlink.com). 
IT needs to have some level of control 
over how information is handled and 
accessed, and this has led to more specif- 
ic policies about how employees connect 
to online resources, how often they 
change passwords, and whether they can 



download applications. Policies are 
also being tweaked to specify what 
happens to a device when an employee 
leaves a company — whether it's recy- 
cled after being set to factory defaults, 
for example. 

"Having policies in place to lay the 
groundwork of how [these devices] 
will be handled is an important part of 
allowing the equipment to connect in 
the first place, since employees need to 
understand the limits and boundaries they 
are going to be required to follow," Lingen- 
felter says. "Security plays a very big role in 
having devices connect to the network, and 
security has to start with a policy." 

Central Security 

In terms of other strategy trends, more 
enterprises are looking toward layered, cen- 
tralized security with multiple protection 
points within a network, rather than simply 
trying to protect a network parameter. 

Because of the increased use of virtual- 
ization, clouds, and online applications, 
simply surrounding a network with securi- 
ty measures isn't enough anymore. A net- 
work now has to be somewhat porous for 
business efficiency, which means that 
enterprises are looking at ways to imple- 
ment security at numerous levels. 

According to network security firm 
Fortinet (www.fortinet.com), there's 
increased focus on preventing infections 
from cross-pollinating between virtual 
machines. IT managers are also taking a 
hard look at cloud-based services, which 
can open enterprises to risks and vulnera- 
bilities as data is shuttled through multi- 
ple networks. 

Technologies for data loss prevention and 
risk mitigation are cropping up more fre- 
quently for cloud environments, with some 
companies offering remote management, 
better software patching, or cloud-specific 
security assessments. 

Second-layer security is also becoming 
popular, Fortinet notes, helping enterprises 
have better application control and, in par- 
ticular, more functionality beyond letting 
users have access. 

Security technology and tactics may 
evolve slightly as threats emerge, but by 
staying on top of the trends and putting 
solid policies in place, data center man- 
agers can have a better chance of foiling 
the bad guys. □ 
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Data Center-Grade UPSes 



Active Power CleanSource UPSes Eaton 9390 UPS 




( o 



Active Power CleanSource UPSes are energy-efficient, 
battery-free UPS systems that use integrated flywheel 
technology. CleanSource UPSes protect mission-critical 
data center operations from everything from short power 
disturbances to complete outages. With an energy 
efficiency of up to 98% and more than 77 million hours of 
runtime in the field to date, CleanSource creates a pre- 
dictable, continuous power system that will ride through 
power outages to keep critical operations up and running. 

• Seven times less likely to fail compared to conventional 
systems 

• Energy efficiency up to 98% 

• Battery-free means no damaging battery fumes, 
gases, or hazardous material 

• Space-efficient at a quarter to half of the footprint of 
conventional systems 

• Reduces total cost of ownership by 60% 

• 75% reduction in carbon emissions 

Best For: Organizations looking for an energy- 
efficient solution. 

Price: Starts at about $80,000 




The Eaton 9390 is a double-conversion UPS that supplies 
clean, continuous, uninterruptible power to connected 
equipment in midsized data centers. The 9390 was recent- 
ly among the Eaton UPSes that were deemed compliant 
with the U.S. TAA (Trade Agreement Act). TAA-compliant 
products have been approved by the U.S. government for 
use in a range of government facilities, including schools, 
courthouses, libraries, and state facilities. The 9390's 
transformer-less design offers increased efficiency over 
transformer-based UPSes. It is designed to deliver the 
reliability and uptime necessary for critical applications. 

• Up to four UPSes can work in parallel with the 
Powerware Hot Sync technology 

• Flexible installation provided by cable entrance spots 
at the top and bottom of the UPS 

• Advanced Battery Management technology preserves 
batteries by charging them only when necessary 

• Small enough to fit in tight spaces such as back or 
side walls 

• The transformer-free design provides up to 99% 
efficiency 

Best For: Midsized data centers in the public sector. 



Eaton 9395 UPS 




Eaton's 9395 UPS is designed to be efficient in a compact 
footprint. With customizable options, the 9395 is engi- 
neered to meet any system design and provide backup 
power and scalable battery runtimes for large data cen- 
ters. The 9395 was recently SMaRT (Sustainable 
Materials Rating Technology)-Gold certified, which can 
contribute to points in two LEED credit categories for build- 
ings and projects seeking certification. 

• Provides double conversion and a transformer- 
free design 

• Multiple UPSes can work in parallel using Powerware 
Hot Sync technology 

• Inherent redundancy configurations are available 

• Batteries are preserved through Advanced Battery 
Management technology 

• Prewired configurations offer quick installation and 
reduced costs 

Best For: Data center projects or facilities seeking 
LEED certification. 



GEGT Series 




GE LP33 Series 



The transformerless GT Series (5 to 10kVA) offers a true 
online VFI (voltage and frequency independent), double- 
conversion range, and it comes in a tower and rack 
convertible design. The GT Series can be expanded to 
create up to 30kVA in a parallel system. Batteries are 
hot-swappable, and extended runtimes are available with 
matching battery cabinets. The GT Series can also han- 
dle cold starts and programmable load shutdowns with a 
remote power switch for separate sites. Multiple PDU 
options and backfeed protection are also available. 

• Single-phase output voltages of 1 20/208V 

• 80 to 1 38V input voltage window 

• Frequency conversion 60/50Hz 

• SNMP can be added for network communication 

• Prevents deep battery discharge at low loads 

Best For: Data centers that need a flexible UPS option. 




The Digital Energy LP33 Series 
UPS (10to100kVA) offers a 
variety of power protection features for mission-critical 
applications, including GE's Redundant Parallel Architec- 
ture technology, which parallels up to four units. Operating 
in double-conversion mode, the LP33 Series offers true 
online VFI (voltage and frequency independent) operation 
and high-frequency Pulse Width Modulation IGBT digital 
control techniques for a quicker transient response and 
lower output distortion. Additionally, its transformerless 
design makes it compact, lightweight, and quiet. 

• Greater than 0.98 input power factor and less than 8% 
input THD distortion 

• Up to 98% operating efficiency in ECO mode 

• 54 to 66Hz input frequency and 208V 

• LAN, modem, SNMP, RS-232, Modbus RTU, pro- 
grammable alarm contacts, and TCP/IP connections 
provide for remote monitoring and management 

• SBM (Superior Battery Management) technology helps 
to preserve battery life 



GE SG Series 




The 10 to 750kVA three-phase SG Series from GE uses 
its Redundant Parallel Architecture to parallel up to eight 
units to achieve N+1 redundancy, and it is managed 
through a peer-to-peer configuration with redundancy in 
critical aspects of the system. With each SG Series UPS 
operating in double-conversion mode, your mission- 
critical programs will always have the power they need 
because of true continuous online VFI (voltage and 
frequency independent) operation. The SG Series also 
offers front access, a fifth and 11 th internal harmonic 
filter, and fused surge protection. 

• 480V, 60Hz 

• The inverter is modulated through Space Vector 
Modulation, an advanced Pulse Width Modulation dig- 
ital control technique to maximize efficiency and bat- 
tery runtime 

• Intelligent Energy Management cuts operating costs 
and increases operating efficiency 

• Up to 94.4% load efficiency in double-conversion 
mode 



Product 



Description 



Product 



Description 



Best For: Companies searching for a transformerless 
and energy-efficient three-phase solution. 



Best For: Organizations looking for an energy-efficient 
three-phase solution. 
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Emerson Network Power 
Liebert GXT3UPS 




The Liebert online GXT3 UPS from Emerson Network 
Power offers a compact design tinat keeps your critical 
loads running with up to six battery-backed outlets. 
Engineered for PCs, network workstations, servers, net- 
work closets, large network peripherals, and VoIP, the 
GXT3 supports both rack and tower configurations, and it 
preserves batteries through its broad input voltage win- 
dow. Additionally, the GXT3 automatically discovers and 
meets both 60Hz and 50Hz line input frequencies and 
sends out advanced UPS status alerts through both 
automatic and manual battery tests. 

• Just 2U high and is available in VA ratings from 500 to 
3,000 in either 120V or 230V models 

• Available in either rack or tower configurations 

• Up to six battery-backed outlets and up to eight min- 
utes of battery backup time at full load 

• SNMP and Web-based management options 

• Input circuit breakers protect against and help recover 
from overloads 

Best For: Companies looking for a compact UPS. 

Price: Starts at $584 



Emerson Network Power 
Liebert NXL 




The Liebert NXL is engineered to power medium-sized to 
large data centers that handle applications with high power 
requirements. With the ability to handle virtually any input 
condition, the NXL can support backup generators and a 
broad range of input distortion. The NXL also offers comput- 
er-level output to critical loads. Rather than de-rate the out- 
put or concede availability, the NXL can operate at 100% 
despite situations such as clogged air filters or high ambient 
temperature, and it maintains full regulated power in over- 
load conditions. Top and bottom cable entry is available. 

• Available in single-module and multimodule configura- 
tions with capacities of 250kVA, 300kVA, and 400 kVA, 
as well as 740kVA at 480V 

• 1+N and N+1 configurations are available on multimod- 
ule 750kVA models 

• Easy installation thanks to internal cabinet cable wiring 
and ship-ahead I/O section 

• ActiveStar Digital Signal Processor management 
eliminates potentiometers 

• Up to 94% operating efficiency 

Best For: Medium-sized to large data centers that handle 
applications with high power requirements. 

Price: Starts at $90,000 



Tripp Lite SMART3000RMXL2U 




Supporting loads up to 2,880 watts, the 3kVA 120V 
SMART3000RMXL2U UPS is designed for both rack- 
mounts and towers and has a 0.96 power factor. Addi- 
tionally, it provides two separate switched outlets for 
remote reboot and load-shedding applications. The UPS 
also supports comprehensive reporting of equipment 
load levels, self-test data, and utility power conditions. It 
also offers a notification alarm for on-battery, low-battery, 
and overload conditions. 

• NEMA L5-30P input plug and nine UPS-supported 
outlets 

• Hot-swappable battery and electronics modules 

• 96% efficiency rating 

• Includes PowerAlert auto-shutdown and management 
software for monitoring, reporting, and logging of all 
site and UPS operational conditions 

• HID-compliant USB interface supports integrated 
power management and auto shutdown features of 
Windows and Mac OS X 

Best For: Server, networking, and telecommunications 
organizations looking for rackmount, wallmount, or tower 
solutions. 

Price: $1,149 



Tripp Lite 
SmartOnline 
SU30K3/3 30kVA 




The Tripp Lite SU30K3/3 30kVA is a three-phase true 
online UPS that offers a compact and lightweight design. 
Boasting output power with less than 3% total harmonic 
distortion, the SU30K3/3 utilizes IGBT inverter technology 
and hardwire input and output connections to support a 
wide range of PDU-style power connections. 

• Large-capacity 30,000VA/24,000-watt UPS 

• 120/208VAC, three-phase, four-wire (plus ground), wye 
input and output 

• Wide input voltage correction range (88-144/166- 
250VAC) 

• 3:1 crest factor for a range of equipment compatibility 

• Both a manual bypass switch and an automatic bypass 
function 

Best For: Enterprises looking for a compact, large- 
capacity three-phase solution. 

Price: $16,700 
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Data Center Fire Suppression 



Ansul Sappliire Fire 
Suppression System 




Ansul's Sapphire Fire Suppression System is a total 
flooding system that uses Novec 1230 fire protection 
fluid. Novec fluid is environmentally friendly, contains 
no ozone-depleting materials, and has a global warm- 
ing potential of 1 .0 and an atmospheric lifetime of only 
five days. 

• Total flooding effective on class A, B, and C fires 

• Suppression fluid is released through a network of 
pipes and nozzles 

• Clean agent is appropriate for protecting high- 
value assets 

Best For: Data processing centers, tape storage, and 
telecommunications centers. 



Fike ECARO-25 




Pike's ECARO-25 pairs DuPont's PE-25 fire extinguish- 
ing agent with Pike's rupture-disc valve to offer greater 
agent coverage and distribution. Unlike sprinkler sys- 
tems, the PE-25 agent is safe for sensitive computer 
equipment. The agent also won't harm facility workers 
and is environmentally friendly, with zero ozone deple- 
tion potential. 

• Colorless, odorless, and leaves no residue, requiring 
no cleanup 

• Minimizes business downtime due to fire 

• Can be used in occupied and unoccupied spaces 

• Electrically nonconductive 

Best For: IT systems, telecommunications centers, 
control rooms, computer rooms, and media storage. 



Fireaway Stat-X Electrically 
Operated Units 




Stat-X Electrically Operated Units from Pireaway produce 
an ultra-fine potassium-based aerosol that is safe for elec- 
tronic equipment or magnetic media. Electrically operated 
units can be manually or automatically activated and, un- 
like gaseous systems, do not require pressure vessels or 
piping. In addition, electrically operated units are lighter 
and take up less space than other extinguishing agents. 

• Suitable for enclosed facilities and local applications 

• Not harmful to personnel 

• Can be quickly vented after discharge for easy 
post-fire cleanup 

• Environmentally friendly with zero ozone deple- 
tion potential 

Best For: Critical applications across a range of indus- 
tries, including data processing facilities, process control 
rooms, and telecommunications facilities. 



FireXonline OnGard 




The OnGard fire protection system from PireXonline 
consists primarily of a tank filled with fire-suppressing 
agent. A tube connected to the tank delivers the sup- 
pression agent directly to a potential fire site, such as 
the inside of a rack enclosure. When a fire is detected, 
the tube will rupture and release the agent into the area. 
Extinguishing a fire at the source may eliminate the 
need to discharge a computer room's larger suppres- 
sion system. 

• Penetrates hard-to-reach areas 

• Detects and extinguishes fires in less than 10 seconds 

• Reduces downtime caused by data center fire 

Best For: Data centers, computer rooms, and 
communications facilities. 



Periphman Aero-K 




Periphman's Aero-K fire suppression system uses potas- 
sium-based aerosol generators that can extinguish a fire 
in seconds. The aerosol won't harm electronics or elec- 
tronic media such as tapes and disks or the health of 
facility personnel. Aero-K aerosol generators are com- 
pact and easy to install and feature multiple smoke 
detectors that limit the chance of accidental discharge. 

• Won't corrode steel, plastic, nickel, brass, zinc, cop- 
per, aluminum, or other commonly used composites 

• Leaves little residue after venting 

• Ecologically friendly with no agents that can harm 
the ozone layer 

• Control panel with battery backup in case of pow- 
er outage 

Best For: Information technology and telecommunica- 
tions industries. 



Victaulic Vortex 




The Victaulic Vortex fire suppression system is the 
world's first-ever hybrid (water and inert gas) fire extin- 
guishing system that extinguishes fires without the use 
of any toxic chemicals by deploying a high-velocity, low- 
pressure mixture of nitrogen and water. The system 
delivers as little as one gallon of water per emitter per 
minute, and each emitter can protect up to 2,500 cubic 
I feet. The system is compatible with facility fire protection 
systems to provide greater design flexibility, and it is 
recharged rapidly allowing for a return to working condi- 
tions almost immediately after a fire. 

• Nearly zero wetting of protected areas 

• No ozone depleting or greenhouse gas emissions 

• Quick system recharge to support minimal facility 
downtime 

• Protects people and assets 



Product 



Description 



Product 



Description 



Best For: Protection of enclosed cabinets and isolated 
equipment within protected spaces. 
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Fireaway Stat-X Thermal Units 



r 





Fireaway's Stat-X Thermal Units emit an ultra-fine potas- 
sium-based aerosol that won't harm sensitive electronic 
equipment or magnetic media. Thermally operated units 
integrate a thermal detector that automatically activates 
the unit in a fire situation. Thermal units can also be 
manually activated. Thermally operated units have a low 
installation cost, are virtually maintenance-free, and have 
a shelf life of more than 10 years. 

• Easy installation that doesn't require pressure vessels, 
piping, or installation manpower 

• Occupies less space than other extinguishing agents 

• Environmentally friendly with zero ozone depletion 
potential 

• Favorably reviewed by EPA for SNAP listing 

Best For: Electronic cabinets, data processing 
equipment, and printing equipment. 



XtralisVESDA ECO 




Xtralis has extended its market-leading VESDA very early 
warning ASD (aspirating smoke detection) system to include 
reliable gas detection and environmental monitoring. VESDA 
ECO from Xtralis uses new or existing VESDA ASD pipe 
networks to actively sample air for the presence of smoke 
and up to nine hazardous and/or combustible gases. 
Integration with other building systems delivers real-time 
situational awareness and intelligent emergency response. 

• Leverages existing VESDA ASD pipe networks to cost 
effectively detect both smoke and gas 

• Provides detection of multiple gases through simple 
expansion without major construction or retrofitting 

• Reduces energy consumption and costs through 
demand-controlled ventilation 

• Works in harsh environments 

• Integrates easily with building systems such as FACP, 
PLC, HVAC, and BMS 

Best For: Battery-charging rooms, clean rooms, 
underground utility tunnels, and other critical areas. 
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Robust, economical power distribution solutions 
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Prepare For The Unexpected With Room Alert 



o one knows when or how disaster will 
strike. We just know the p{)LenLia] is always Lhere. 
So preparation is crucial lo minimizing its impact 
on computers, networks, users & business. 

When disasters occur, there are significant 
costs in areas that go far beyond the simple 
replacement of damaged hardware, i his is 
because what happens in the data center or other 
facility elfects the entire oi^anization. If disaster 
strikes your facility, how will it impact business? 
Who will get Lhe blame? Could it have been 
prevented? What will it cost? 
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Start At $195 


Room Alert pmductf; can monitor: 


• Temperature 


* Smoke/ Fire 


* Humidity 


• Air Flow 


• Heat Index 


• Sound, Light 


' Main / UPS Power 


' Panic Buttons 


• Flood /Water 


• Dry Contacts 


• Room Entry, Motion 


' Switch Sensors 


• IP Network Cameras 


' Wireless & More 



AVTFCH has a full line of powerful, scalable 
Room Alert solutions for real-time 
envirotitnent monitoring in a computer room, 
data center or other facility. All models 
arrive assembled with easy to install 
hardware, cables, sensors, easy-to-use 
logging & alerting software, printed 
documentation, unlimited technical support 
and a '30-Day Satisfaction Guarantee'. Users 
can typically install in under 10 minutes. 

Room Alert products monitor critical 
environment conditions like temperature, 
power, humidity, flood, smoke, room entry, 
air flow* motion and more, alert staff by any 
method and can take automatic corrective 
action. There is a model that is right for any 
organization and budget... yours too! 

Call or Visit Us Online Today 



S^AVTECH 



888.220.6700 • 401.628.1600 
AVTECH.com 



Protect Your IT Facility... Don't Wait Until Ws Too Late!''' 

^ AV I KCH is iIil; Morldividi; [Ladcr uf M & faci lilies ciivinirgriicrgi ini>r)il(iririg |mKJji;L?i. Pjrchast; i]filirLO ai H 1 1 u roii ith^-ii L Mt m i It i.Lt:L mti . Reseller inquiries wcIohtii.'. 
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Security Is Top Concern 
For SIEM Users 

According to a pair of surveys from RSA, the 
security division of EMC, SMEs' interest in log 
management has shifted from being all about 
compliance to being about enhancing security. 
The SANS Institute conducted one of the stud- 
ies, which found that 80% of organizations that 
use log management ranked security as a more 
critical application than regulatory compliance. 
RSA's own survey seconds the notion that 
security is a primary concern for SIEM (security 
information and event management) users in 
small to midsized enterprises. According to 
Sam Curry, chief technology officer for market- 
ing at RSA, "In essence, SMEs are seeing the 
need to benefit from all a good SIEM platform 
has to offer, which includes stronger detection 
and prevention capabilities." 

Curry explains how SIEM can make a real dif- 
ference for SMEs: "A good SIEM platform can 
make use of [an intrusion detection system and 
vulnerability assessment tool] by correlating 
IDS logs with vulnerabilities that the scanner 
has found," he says. "Therefore, [IT managers] 
only get alerted to a real attack on a vulnerable 
server, which means they can work on creating 
more information about their risk landscape and 
spend more time on actively shutting down 
risks and threats." 

Security Trumps Compliance 

In the RSA survey, 89% of current SIEM users 
said that security operations functions are the 
primary application, whereas 54% said compli- 
ance is their primary SIEM application. But all 
this shifting attention doesn't mean compli- 
ance is going away as a priority for SMEs. 
"Regulations exist to change behaviors and 
encourage the right ones," Curry says. "They 
are not waning so much as morphing to en- 
courage better practices that, naturally, are 
more aligned with the business." 

The RSA survey also revealed that 66% of 
SIEM users at SMEs said real-time monitoring 
is a must-have feature when considering a 
SIEM vendor, and 75% agreed that real-time 
monitoring is a vital necessity. "The value of 
faster and more accurate response times is 
obvious," Curry says, but the less obvious 
benefits are "less time dealing with false posi- 
tives, better ability to prevent [attacks], and 
more focus on what matters as the signal is 
pulled from the noise . . . and more time to sit 
quietly and enjoy the hum of the machines in 
the data center without worrying about the 
constant alarms." 



by Andrew Leibman 
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SIX QUICK TIPS 



Troubleshoot 

Cabling 

Problems 



Untangle The Rats' Nest 



by Sixto Ortiz Jr. 
• • • 

If the data center is an organism, the 
cabling used to connect all of the compo- 
nents is its circulatory system. This infra- 
structure element is particularly important, 
not just because cabling is the conduit for 
data and power, but because sloppy 
cabling practices can affect heating and 
cooling performance in the data center. 

Troubleshooting cabling issues can be 
particularly vexing, simply because there 
is so much cabling snaking around the 
data center. Just as with everything else in 
the data center, a logical and well-thought- 
out approach to arranging and organizing 
cabling will ease troubleshooting and save 
hours of frustrating, tedious labor. 

Label It 

A particularly common issue when 
troubleshooting a cabling problem is 
simply figuring out exactly where cables 
lead and how they are connected at the 
patch panel. Unplugging the wrong cable 
can make a problem much worse; thus, 
labeling is a critical component of suc- 
cessful troubleshooting. 

Christina Hansen, product specialist at 
CableOrganizer.com, says properly labeling 
both patch panels and network cables can 
go a long way toward saving both time and 
energy. Hansen says proper labeling doesn't 
take much, just adhesive-backed labels for 
patch panels and heat-shrink sleeves for 
patch cords. The rationale for patch cords, 
she adds, is that they surround the cable and 
won't just peel away and fall off. 

Ken Koty, a sales engineer with PDU 
Cables (www.pducables.com), says adminis- 
trators should use accurate and legible label- 
ing on each end of underfloor power cables. 
This approach, he adds, allows for easy iden- 
tification and tracking of all power feeds 



BONUS TIPS 



■ Look for simple fixes. Eric Marcus, 
founder of Marcus Networking (www.marcus 
nt.com), says administrators should look for 
simple things when troubleshooting. For 
example, he says, personnel should look at 
the jack itself to make sure there is no dust 
or dirt in it. Also, cables should not be 
placed near electrical wiring or on top of 
fluorescent lighting because this can 
cause interference. 

■ Ditch the zip ties. Vladimir Pivtorak, 
infrastructure services manager at Quest 
Media (www.questsys.com), says zip ties 
that are tied too tightly can cause a signal to 
bounce inside the cable where the straps 
are located, decreasing cable performance. 
Instead of ties, he says, administrators 
should use Velcro. 



under the raised floor. Also, Koty says, 
administrators should color-code the con- 
ductors of servers requiring three-phase 
power feeds such that each conductor is con- 
nected to the proper phase in the PDU/RPP. 

Adam Schwam, CEO of Sandwire (www 
.sandwire.com), says all jacks and wires 
need to be labeled so they can be easily tied 
to their counterparts on the patch panel. This 
approach, he adds, can prevent the acciden- 
tal disconnection of the wrong cable or jack. 

Manage Your Cords 

One of the best ways to save man-hours 
and frustration when troubleshooting 
cabling issues in the data center, Hansen 
says, is to keep patch cords organized so 
that administrators can find what is needed 
at a glance instead of digging through a 
thick curtain of tangled patch cords. This 
organizing task, though it might seem labor- 
intensive at first, can pay dividends whenev- 
er the inevitable cabling problems occur. 

PDU Cables' Koty recommends the use 
of factory-fabricated underfloor power 
cable assemblies to maintain cleanliness in 
the data center and protect sensitive equip- 
ment from metal shavings and/or dirt. 

Rely On Quality 

Sometimes, the root cause of a cabling 
issue can be traced to substandard installa- 
tion. This can be especially frustrating 
because shoddy installation across the 
entire data center may mean a redo of 
infrastructure tasks that should be right in 
the first place. 

JR Rodrigues, president of NetCablesPlus 
.com, says administrators should be suspi- 
cious of cables that have been manually cut 
and crimped in the data center. Rodrigues 
says the bulk of complaints logged by cus- 
tomers have hand-crimped cables at the 
root. To avoid this issue, he says, adminis- 
trators should choose factory-manufactured 
and -tested patch cables that are much more 
reliable. Looking for "homemade" cables 
first, no matter what the symptoms of the 
cabling problem are, can save a lot of 
debugging time, he adds. 

Saving budget dollars by going cheap 
when it comes to cabling may seem like an 
easy proposition for administrators charged 
with cutting data center costs. However, 
this approach may wind up causing greater 
expenses and troubleshooting pains. Eric 
Marcus, founder of Marcus Networking 
(www.marcusnt.com), says administrators 
should shy away from purchasing cheap 
cabling. Cabling is the backbone of the 
network and one of the most important 
components to ensure a network runs prop- 
erly, Marcus says. 

Embrace Proper Design 

Like any other data center infrastructure 
element, well-thought-out cabling design 
can alleviate troubleshooting efforts and 



help immensely when issues crop up. But, 
says Vladimir Pivtorak, infrastructure ser- 
vices manager at Quest Media (www 
.questsys.com), most data center cabling 
problems result from poor design. 

For example, fiber and copper should be 
separated so cables are not exposed and so 
they feed to their appropriate switch, 
Pivtorak says. If the switch is removed, 
the cable is also removed so there are no 
"stray" unused cables, and there is no need 
to re-dress cables inside the tray. 

Another element of good cabling design, 
Pivtorak says, is the use of cable trays to 
manage cables and greatly decrease the time 
needed for troubleshooting because every- 
thing is clearly laid out and labeled. Trays 
should be located on or above the cabinet 
or rack for easy access and management. 
And, he adds, administrators should avoid 



Most Practical Tip: 

Use High-Quality 
Receptacles 

Ken Koty, a sales engineer with PDU Cables 
(www.pducables.com), recommends that 
administrators install power cable with high- 
quality receptacles. Inferior devices can 
cause heat buildup that can overdraw 
amperage and trip the circuit breaker. A 
failing circuit breaker could cause a fire. 

Prior to energizing power whips, Koty says, 
it is important to make sure the completed 
assembly has been Hi-Pot tested from phase 
to phase and phase to ground. This ensures 
there are no shorts in the conductors, which 
can fail upon energizing or in the future if 
cables are moved under the floor. 

Best Tip: 

Simplify Networking 

Sunil Ahluwalia, product line manager at 
Intel's LAN Access Division, says administra- 
tors can simplify cabling in the data center by 
using 10 Gigabit Ethernet to consolidate traf- 
fic in the data center. Ahluwalia says typical 
virtualized servers in the data center use 
eight to 10 GbE LAN ports and two dedicated 
SAN ports. This approach, Ahluwalia says, 
leads to excessive complexity, high equip- 
ment costs, and increased energy usage. 

Instead, administrators should seek to sim- 
plify cabling by consolidating traffic from mul- 
tiple Gigabit Ethernet connections onto a 
single lOGbE adapter, which will significantly 
reduce cable and infrastructure complexity 
and TOO. Also, he adds, moving to lOGbE 
can lead to lower energy use and simplify 
network connectivity because lOGbE can 
carry storage traffic, including both iSCSI 
and FOoE. By using a trusted Ethernet infra- 
structure for both LAN and SAN traffic, adds 
Ahluwalia, administrators can eliminate 
expensive storage-specific adapters. 



routing trays under the raised floor 
because this causes interference with 
the air circulation and adds accessibil- 
ity difficulties. 

Jesse Hillman, CIO of Celergy Networks, 
says there are many data centers where 
raised floors are full of old, dead mainframe 
cabling or CAT 1/3 cabling that was long 
ago abandoned. This environment, he adds, 
creates multiple issues, such as the obstruc- 
tion of airflow under the floor and increased 
costs due to the complexity of troubleshoot- 
ing the snake pit of cables living under the 
raised floor. 
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All The Network 
Tools You'll Need 

The ManageEngine OpManager net- 
work monitoring software is used by more 
than 700,000 network administrators in 
more than 93 countries. And in version 8.7 
of OpManager, ManageEngine has added 
Automatic Layer 2/Layer 3 mapping and 
upgraded the VMware monitoring add-on 
to deliver more in-depth information. Key 
VMware additions include support for 
VMware vSphere monitoring as well as 
ESX4.0, ESX4i, ESX 3.5, and ESX3.5i. 

OpManager' s key features include: 

Network performance monitoring. 
With real-time performance graphs, you 
can monitor CPU, memory, and disk uti- 
lization statistics to make smart decisions. 

Network traffic analysis lets you know 
your top users, applications, and sources. 
Network configuration management fea- 
tures let you schedule configuration back- 
ups, know when config changes happen in 
critical network devices, and create 
approval workflows. WAN link monitor- 
ing lets you track network latency in links. 

OpManager also provides exclusive 
monitoring dashboards for Active 
Directory, Exchange, and MS-SQL 
servers. The dashboard view also offers 
SLA availability for servers and networks, 
so you can precisely plan capacity and 
migration activities. Reports can be gener- 
ated on a daily, weekly, or monthly basis. 

ManageEng 

Powering IT ahead 





ManageEngine OpManager 

Network monitoring software that provides 
detailed reports about network utilization 
and performance (complete toolset available 
in 42MB downloadable OpManager file). 

Server and application performance 
monitoring. OpManager offers templates 
for more than 650 device types and 230 
interface types. You can monitor and ana- 
lyze the specific characteristics of any 
SNMP manageable device. For example, 
you can monitor custom services over 
TCP or custom Windows services. 
OpManager can group devices based on 
region, logical group, or business services. 

Fault management. Intelligent alarm 
correlation and color-coded alarms, 
which can be sent via email or SMS 
notifications, help you quickly identify 
faults. OpManager can automatically 
execute self-healing scripts and pro- 
grams when a fault occurs, and there's 
also support for acknowledging alarms 
and adding operator notes. 



(888) 720-9500 
www.manageengine.com 
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The World's First Intelligent 

10G PCI-E Gen2 Network Analysis Adapters 



Today, the Internet and IP networks 
have become the foundation for a vast 
array of commercial services. Moni- 
toring and securing these services has 
become a top priority to ensure that they 




Napatech NT20E2 Capture & NT20E2 In-Line 
Adapters 

Real-time network analysis adapters for applications 
such as as packet capture and replay, traffic generation, 
lawful intercept, IDS/IPS, and policy enforcement. 
$17,919 

are delivered with the expected quality to 
the right people. 

Napatech's 2xlOG NT20E2 Capture 
and NT20E2 In-Line adapters help OEM 
network appliance vendors to build high- 
performance, high-speed network moni- 
toring and security appliances. These 
intelligent real-time network analysis 
adapters ensure that monitoring and secu- 
rity systems can keep up with growing 



napatech 



traffic needs and are capable of receiving 
and transmitting up to 30 million packets 
per second with zero packet loss. 

The NT20E2 network adapters are 
based on PCI-Express Gen 2 and are 
designed for use in any standard PC 
server. This allows OEMs to build high- 
performance appliances based on off- 
the-shelf hardware. 

The NT20E2 Capture adapter is target- 
ing OEM vendors of network monitoring 
and analysis systems as well as other ven- 
dors who need to capture up to 20Gbps of 
traffic for real-time analysis. The data 
traffic is provided by network taps or 
SPAN ports on switches and routers. 
Captured traffic can be recorded to disk 
and replayed using the NT20E2 Capture 
for forensic analysis. The NT20E2 
Capture also includes high-precision 
hardware time- stamping of packets on 
both reception and transmission with sup- 
port for time synchronization to GPS, 
CDMA, and IEEE1588v2 time sources. 

In contrast, the NT20E2 In-line adapter 
is designed for "bump-in-the-wire" appli- 
cations, which require low latency as well 
as full 20Gbps wire-speed reception and 
transmission. The NT20E2 In-line adapter 
is ideal for network security applications 
such as IPS and policy enforcement. 



(888) 318-8288 
www.napatech.com 
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Copper Nanowire 
Process Could Allow 
Foldable Displays 

A team of scientists at Duke University has dis- 
covered a process for making large quantities 
of copper nanowires, which can be used as 
conductors in computer displays, solar panels, 
and even foldable computers. 

Currently, flat-screen TVs and computer dis- 
plays produce images using a series of 
electronic pixels that are connected by a trans- 
parent, conductive layer of ITO (indium tin 
oxide). ITO is also used as an electrode in thin- 
film solar arrays. However, ITO is inflexible and 
increasingly expensive, and its production 
process is inefficient. Until now, there were few 
options for replacing ITO. Silver nanowires 
work well as transparent conductors, but they 
are also expensive. Additionally, researchers 
have failed to improve the conduc- 
tivity of carbon nanotubes, 
another possible 
alternative. 




Benjamin 
Wiley, an 
assistant 
professor of 
chemistry at 
Duke who led 
the team that dis- 
covered the new 
process, says that 
copper nanowires, in 
addition to being conductive and transparent, 
would be 100 times cheaper because copper 
is much more abundant than silver or indium. 
Wiley's team created the copper nanowires 
using a mechanism of crystal growth. They 
added certain chemicals to a water-based 
solution to make copper crystallize into 
"seeds," which then self-assembled into tiny 
nanowires. Wiley says the copper nanowires 
have a much more efficient production 
process than ITO. 

"ITO films are very expensive and not flexi- 
ble, and the material must be deposited in 
the vapor phase in a rather slow, inefficient 
process (only 30% of the ITO ends up on 
the substrate)," Wiley says. "Since copper 
nanowires can be coated from liquid, they 
enable much higher film production rates, 
which, in addition to the low cost of copper, 
will dramatically reduce the cost of transpar- 
ent conducting materials. This in turn will 
reduce the cost of flexible displays, solar 
cells, and low-emissivity window coatings." 

Working Out The Kinks In Nanowires 

Wiley says there are some problems with cop- 
per nanowires that have to be fixed before they 
can be mass produced. "Copper wires oxidize 
more easily than ITO or silver and are copper- 
colored instead of gray, [which] can be a nega- 
tive for displays," he says. "The fact that they 
are 100 times cheaper should outweigh these 
factors in many applications." 

Wiley says it will take about a year to fix the 
oxidizing problems. Commercial products using 
copper nanowires, maybe even foldable tablet 
computers, should appear soon after that. 

"I think the fact that they are foldable can be a 
big advantage in many applications," he says. 
"Just think of folding and unfolding a display 
like a piece of paper." 

by Kyle Harpster 
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Cabling 
Considerations 
For Video 

Bandwidth-Heavy Video Apps 

Push Enterprises To Rethink Cabling Strategies 



move to completely digital transmissions 
across the network, because it can handle 
both the content and speed (whereas coax- 
ial cable, for example, can carry high- 
bandwidth analog video). 



Key Points 



Upgrading cabling to support increased 
video bandwidth might seem inevitable, 
but it's wise to first test existing cabling 
to see if it can support new video appli- 
cations. 

Although Category 6 cabling is seeing 
increased adoption rates, enterprises 
might be surprised to learn that their exist- 
ing Category 5 cabling can accommodate 
Gigabit speeds. 

The ability of cabling to support high-def- 
inition video and other modern video 
platforms depends on the health and per- 
formance of the entire network, so it's 
critical to keep all network aspects in 
mind when considering support for video. 



by Christian Perry 
• • • 

The need to support surveillance, high- 
definition video, unified communications, 
and similar technologies in the enterprise 
is placing an emphasis on cabling. Al- 
though older cabling — assuming it's in 
good condition — is perfectly capable of 
handling today's basic data-related tasks, 
hefty video-related tasks can test the limits 
of legacy cabling and lead enterprises to 
consider upgrades. 

Upgrade Or Not? 

According to Ed Gastle, product line 
manager at JDSU (www.jdsu.com), en- 
terprises looking to transition from 
10/1 00Mbps Ethernet to Gigabit Ethernet 
(lOOOBase-T) could need upgrades in 
horizontal, or workspace, cabling, while 
upgrades in data centers could be required 
as speeds move from Gigabit to 10Gb. He 
adds that new cabling may be required to 
support increased bandwidth, but it might 
also be required if the previous cabling 
was improperly installed (for example, in 
cases where 10/100 Ethernet cables have 
only two pairs terminated, because Giga- 
bit Ethernet requires all four pairs). 
However, he warns against wholesale 
changes simply based on the notion of 
increased bandwidth. 

"Many enterprises make the mistake of 
'forklift' upgrading their existing plant 
instead of testing it to see if it will support 
the higher speeds. For horizontal cabling, 
even legacy Category 5 cabling can sup- 
port Gigabit Ethernet. The best approach 
for horizontal cabling is to speed-test the 
cable to see if it supports Gigabit Ether- 
net," Gastle says. 

Especially in organizations where video 
streaming is a daily priority, CAT 6 
cabling is seeing increased adoption rates, 
thanks to its ability to not only easily han- 
dle Gigabit Ethernet speeds but also 
lOGbE speeds. Mike Jude, program man- 
ager of consumer communications ser- 
vices for Stratecast, a division of Frost & 
Sullivan, notes that CAT 6 cabling is a 
wise choice if an organization wants to 

Know The Task Ahead 

Think you're prepared to replace your cabling? Think again, unless you've already been through 
the process in the past. Mike Jude, program manager of consumer communications services for 
Stratecast, a division of Frost & Sullivan, says that recabling is an "extremely painful" process that 
requires a boatload of labor to remove the old cable and insert the new— even when there are 
existing cable races. 

"Enterprises need to determine whether they actually need new cabling throughout their campus. 
In many cases, leaving existing CAT 5 and coax in place will probably support most of what they 
want to do. When I was in the business, we would recommend that companies going through 
recabling place some empty races with pull cords to facilitate the next upgrade. Ultimately, I sus- 
pect that most inside cabling will go optical— having empty races and the means to pull cable 
through them will save a lot on future upgrades," he says. 



However, for data centers that decide to 
move to lOGbE and upgrade their cabling 
in the process, copper-based CAT 6 is no 
slam-dunk decision. Although copper 

"Beyond the cabling, it 
ensure all layers of the 
configured and tested, 
cabling and moving up 

- JDSU's Ed Gastle 



many data centers ultimately choose a mix 
of both copper and fiber cabling. 

Consider The Big Picture 

Although video is no doubt the spur 
behind a new generation of high-powered 
hardware and the infrastructure needed to 
support it, Jude says that large amounts of 
video don't quite require massive amounts 
of bandwidth. Even though existing Ether- 
net rates can support video without mov- 
ing into the Gigabit range, he notes that 
regular use of high-definition video will 
indeed require an upgrade if you're still 
using older cabling. On the other hand, if 
you're considering upgrading your cabling 
simply to support Skype or Google-level 
video, it's best to wait until the need is 
more acute, he says. 

Of course, merely replacing cable won't 
magically provide your enterprise with the 
ability to support big-bandwidth video, 
because cabling doesn't directly support 
video. Gastle says that although cabling 
supports a specific Ethernet protocol (such 
as lOOOBase-T or lOOOBase-SX), it's the 
IP network and everything under it (in- 
cluding cable) that supports video. As 
such, he recommends that organizations 
target more than just the cabling itself 
when considering support for video. 

is important to 
network are properly 
starting with the 
through the layers...." 



cabling is generally less expensive and eas- 
ier to install, fiber-based cabling can han- 
dle more bandwidth, can travel farther 
distances, and is less likely to suffer from 
interference. Both fiber and the newer cop- 
per standards require personnel who are 
trained to handle the technologies, though 



"Beyond the cabling, it is important to 
ensure all layers of the network are prop- 
erly configured and tested, starting with 
the cabling and moving up through the 
layers — Ethernet, IP, and beyond. Testing 
individual segments of the network is 
worthwhile, but ultimately, it is the end 
users' quality of experience that matters. 
The entire system between the end user 
and video source must be configured to 
support video and then tested to ensure the 
QoE requirements are met," Gastle says. 

Because video, and particularly com- 
pressed video traveling over IP networks, 
is susceptible to packet loss, delay, and jit- 
ter, it's critical to test the network from 
end to end to discover potential weak 
links. In the case of cabling, Gastle says 
that issues can cause packet loss, so 
cabling (whether it' s old or new, or copper 
or fiber) must be tested for its ability to 
support the Ethernet signal running over it. 
These tests can help organizations deter- 
mine whether upgrades are necessary. □ 
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Software Piracy 
& Licensing: 
Is Your Business 
In Compliance? 

Save Your Company A World Of Hurt 



by Brian Hodge 
• • • 

According to a new software study by 
the BSA (Business Software Alliance), 
piracy rates in the United States are the 
world's lowest, at 20%. That looks great 
at first glance, but it's deceptive: Con- 
sidering the United States has the world's 
largest economy, that's still a huge num- 
ber of instances of piracy. Making sure 



Key Points 



• Software piracy happens not only fronn 
willful disregard but also through care- 
lessness and ignorance of licensing 
stipulations. 

• Auditing tools will enable IT to track 
software installs and licenses, but poten- 
tial infractions should be investigated 
carefully, because erroneous red flags 
do occur. 

• Establishing clear policies, locking down 
PCs, and nnaking sure ennployees can 
quickly get the software they need are 
ways to nnininnize future piracy. 



the enterprise has legal, licensed copies of 
all software applications is a task that 
data center managers need to tackle head- 
on, because piracy's consequences can 
be dire. 

Even if piracy is never found out beyond 
your walls, there's still significant risk, as 
software acquired from shady sources may 
also come with embedded malware, which 
could damage the company network or 
compromise its security. 

If piracy is discovered externally — 
through outside audit, by report from a 
disgruntled employee, or other means — 
things only get worse. Worst-case scenar- 
ios may include legal headaches and 
stiff fines for copyright infringement or 
a full audit by the BSA, "which can be 
an extremely unpleasant and expen- 
sive process," says Luther Martin, chief 
security architect at Voltage Security 
(www.voltage.com). 

The harm may extend far beyond legal 
penalties. "[Piracy] also has the potential 
for significant reputation damage to the 
company's brand, being known as a firm 
that is not ethical in the way it conducts 
business," says Leigh Haig, independent IT 
security consultant. 

How Pirated Software Gets In 

Instances of piracy occur in the work- 
place through a variety of means. Under- 
standing their underlying circumstances 
and misunderstandings is the first step to 
thwarting them. 



Obviously, there's willful disregard of 
the law by people who know better — for 
instance, a manager who resorts to pirated 
software to stretch the department budget. 
Impatience by employees who want the 
right tools for their jobs can also lead to 
cutting corners. 

"Given the choice between using unli- 
censed software right now and waiting 
for a purchase order to be processed to 
get fully licensed software, many people 
will take the easier, if not legal, option," 
Martin says. 

Piracy can also be introduced through the 
carelessness of well-meaning employees, 
such as installing a program in excess of its 
number of authorized licenses. And, work- 
ers who take home a company notebook PC 
may install unlicensed software for person- 
al use, which could nevertheless implicate 
the company in the infraction. 

Another possibility is an incomplete 
understanding of open-source and free 
products. "Some of these will have specific 
clauses that allow free private use but not 
for commercial," Haig says. "This could 
very easily lead to an organization believ- 
ing the product they are using is legitimate, 
when in fact it may be breaching acceptable 
use of the product." 

Pirate Hunting 

There are many commercial asset inven- 
tory tools that IT can use to conduct inter- 
nal audits and manage software licensing 
within a company. These gather details on 
what applications are installed on company 
PCs and then compile a central database 
that can be used to make sure licensed 
products remain within the permissible 

The International 
Picture 

As the Business Software Alliance study 
on piracy shows, U.S. software connpliance 
breaks down to 80% licensed and 20% un- 
authorized. If s usually a factor of ennployee 
behavior rather than business policy. 

"In other countries, that's not the case," 
says Voltage Security's Luther Martin 
(www.voltage.conn). "In China, for exannple, 
it's ainnost the exact opposite, with only 
about 20% of software being licensed, and 
there, if s nnore often caused by businesses 
than by individuals." 

So if you're dealing with international branch 
offices, you nnay encounter a very different 
attitude to piracy, even cultural acceptance, 
that requires stricter control. 



number of installations and look for non- 
licensed products. 

Although discrepancies certainly warrant 
investigation, that doesn't necessarily mean 
there's a violation, and the results may not 
even be what they appear at face value. 

"The two biggest problems [with license 
tracking software] are apparently the inabil- 
ity to recognize bundled software — 
Microsoft Office vs. separate copies of 
Word, Excel, etc. — and the inability to dis- 
tinguish between demo versions of soft- 
ware and the fully functional version," 
Martin says. "I've also heard horror stories 
about how things like 'Microsoft Word,' 
'Word,' and 'Word for Windows' ended 
up being counted separately by one of 
these products." 

When unauthorized software is con- 
firmed, it should either be deleted or a 
license obtained to bring it into compliance. 

The occasion can provide a good oppor- 
tunity to educate the employee in question, 
and possibly the entire department, if need- 
ed, although not with a guilty-until-proven- 
innocent attitude. 

"Workers should be given the benefit of 
the doubt for the first instance of such a sit- 
uation," Haig says. "Heavy-handed tactics 
immediately will create a rift that can serve 
no possible good." 

Prevention Is Better Than A Cure 

Minimizing future incidents of piracy 
starts with a clear, effectively com- 
municated policy addressing the standard 
employees are expected to follow re- 
garding software, including the risks of 
pirated applications and the penalties 
for infractions. 



IT should also encourage management to 
make it easy and expedient for employees 
to obtain legal copies of software they need 
to do their jobs, even when it appears to be 
a nonstandard product. 

The most effective measure would be to 
lock down equipment so end users can't 
install software on their own and require 

There are many 
commercial asset 
inventory tools 
that IT can use to 
conduct internal 
audits and manage 
software licensing 
within a company. 



installations to be handled by IT. The 
obvious downside is increased strain on 
IT and reduced employee flexibility, and 
it should only be considered as the 
nuclear option in an environment with 
repeated violations. 

Given the repercussions of software pira- 
cy, stopping an instance in-house is like 
dodging a bullet. It's far better, though, 
if the bullet never gets chambered in the 
first place. 
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licenses also available 



'Bottom line: dtSearch manages a terabyte of text in a single 
index and returns results in less than a second" — InfoWorld 

dtSearch "covers all data sources ... powerful Web-based 
engines" — el//Ef/C 

'Lightning fast ... performance was unmatched by any other 
product" — Redmond Magazine 

For hundreds more reviews, and hundreds of developer 
case studies, see www.dtSearch.com 
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Windows 7 

We'll catch you up to date with the latest 
regarding Windows 7, including tips for 
getting it to work with existing systems 
and how to avoid problems others have 
run into while installing and implementing 
the OS. 



A Windows 7 Update | 24 

■ Although Microsoft's latest OS has 
been on the shelf for some time now, 
industry experts are saying that most 
small to midsized enterprises will be 
making the move to Win? within the 
next year. 



Sidestep Windows 7 
Problems | 26 

■ Windows 7 will have its share of 
challenges, just like any new OS, but 
here are some common problems that 
can be avoided altogether with the 
right steps. 



A Look At Windows 7 
Service Pack 1 | 26 

■ With Windows 7 Service Pack 1 , 
the new features are very minor, but 
the patch release warrants a well- 
intentioned rollout. 



Resolve Windows 7 
Compatibility Concerns | 28 

■ Enterprises looking for a successful 
upgrade must carefully consider all 
compatibility aspects between Win7 
and existing systems to ensure a 
trouble-free migration. 



A Windows 7 Update 



Follow Microsoft's New OS 

As It Makes Its Way Into The Enterprise 



by Chris A. MacKinnon 
• • • 

The enterprise is just about ready 
for Windows 7. Or is it the other 
way around? Although Microsoft's 
latest OS has been on the shelf for 
some time now, industry experts 
are saying that most small to mid- 
sized enterprises will be making 
the move to WinV within the 
next year. Right now it's most- 
ly preparation, with enterprises 
planning for migration and 
rollout, testing compatibility, 
building systems, and design- 
ing virtualization strategies. 
Regardless of where your 
enterprise is in the deploy- 
ment process, one thing is 
for certain: WinV adoption levels 
are picking up rapidly. 

Adoption Levels 

Few enterprises have complet- 
ed migrations to WinV, according 
to Michael Silver, research vice 
president and distinguished analyst 
with Gartner; however, given that 
many are in the preparation stage. 
Silver expects mainstream deploy- 
ments to start in Q4 2010 or Ql 201 1. 

Rahul Parmar, research analyst for 
Info-Tech Research Group, says his firm 
is seeing WinV adoption picking up, but it 
was still under 10% in Info-Tech's last 
survey early this year. "We do expect 
almost 80% of enterprises to be on 
Windows V by 2012," Parmar says. 

According to Bob Kelly, senior product 
manager for Dell KACE (www.kace.com), 
most organizations report that they are mov- 
ing to WinV within the next year, and most 
are starting the process of identifying the 
tools and processes by which they will roll 
out this upgrade. "With Windows XP sup- 
port running out, and having skipped Vista, 
Windows V migration is a priority for many 
companies over the next year," Kelly says. 
"Aside from support, many organizations 





release 
new operating 
systems to their users by replacing hard- 
ware, and many companies delayed such 
equipment purchases last year, which con- 
tributes to the increased interest and demand 
for Windows V." 

Silver says there are two versions of 
WinV that will be deployed by enterprises: 
Professional and Enterprise. "Most organi- 
zations will buy Windows V Professional 
preloaded on their new PCs, and Windows 
V Enterprise is available to organizations 
with enterprise agreements that include the 
Windows client or those that purchase 
software assurance on Windows," he says. 

Calvin Hsu, director of product marketing 
for Citrix's XenDesktop (www.citrix.com). 
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says WinV 
planning is 
currently hit- 
ting its peak 
of activity, and 
organizations 
are preparing 
their desktop virtu- 
alization strategies to 
aid in the migration. 
"We are rapidly seeing 
the emphasis of desktop 
virtualization deploy- 
ments shift to Windows 
V, and in several cases, IT 
is using desktop virtual- 
ization to offer Windows 
V environments to current 
XP users," Hsu says. "This 
enables them to run both 
desktops side by side, on 
the same device, in a transi- 
tion phase." 

Notable Features 

Microsoft is paying more 
attention to businesses with WinV. 
Specifically, Silver says the Enterprise edi- 
tion of WinV includes several features 
SMEs will find particularly helpful. "Bit- 
Locker and BitLocker to Go (local hard 
drive encryption software) can replace third- 
party products," he says. "DirectAccess, 
another Windows V feature, allows Win- 
dows V PCs to access a corporate network 
without a VPN. And the Windows V MUI 
(multilingual user interface) allows organi- 
zations to build one image for PCs running 
any language (and works better than it did 
in Windows XP)." 

Silver adds that users of any version of 
WinV will get the security improvements 
that came with Vista, improved repair and 
troubleshooting facilities, the new user 
interface, and an OS that will be supported 
into 2020, as opposed to WinXP, the secu- 
rity and other support for which will end 
in April 2014. 

Parmar points to a search feature in WinV 
as one that enterprises will gravitate 
toward. "Windows V's new Federated 
Search functionality provides end users 
with a consolidated search function on their 
desktops," Parmar says. "These searches 
not only allow the user to search through- 
out their own PC, but also index network 
drives and portals (such as SharePoint) into 
the results. We've found at Info-Tech that 
searching for files, especially on sprawling 
shared drives, can take up quite a bit of user 
time, which can ramp up costs for almost 
any internal initiative or project." 



Implementation 

Silver says planning and testing for WinV 
deployments could take a year. "Many orga- 
nizations want to deploy Windows V only as 
they deploy new PCs, and because many 
organizations only refresh one-third to one- 
fifth of their PCs each year, deployment 
could take three to five years," he says. "Of 
course, since Microsoft support [for 
WinXP] will end in 2014, those with longer 
than a three-year refresh will likely need to 
budget to replace PCs faster or upgrade 
existing PCs, as well." Silver says the earli- 
er organizations start deploying new PCs 
running WinV, the more they can do during 
regular refresh cycles. 

In the virtualization arena, Hsu says edu- 
cational institutions are on the forefront of 
using desktop virtualization to implement 
WinV. "They need to stay on the front edge 
of technology in order to teach students, but 



Key Points 



Only a small number of enterprises have 
completed migrations to Windows 7, 
although most are currently at some step 
in the process of planning a deployment. 
Many organizations will deploy WinV as 
they deploy new PCs; therefore, depend- 
ing on an enterprise's refresh cycle, it 
could take three to five years to complete 
a WinV deployment. 

As WinV migration plans ramp up, many 
organizations are preparing their desk- 
top virtualization strategies to help in 
the process. 



they cannot advance their desktop hardware 
at the same pace," he says. Educational 
institutions are using existing hardware (and 
even legacy devices) as end points and 
using desktop virtualization to provide the 
WinV experience, Hsu continues. 

For his part, Parmar cites application 
testing as the No. 1 concern of Info-Tech 
clients during the implementation phase. 

The biggest issues, in Silver's opinion, 
are older applications that are not supported 
under WinV. He says a "severely underesti- 
mated issue" is the number of applications 
that require IE6. "IE6 is a nonstandard ver- 
sion of IE, and Microsoft convinced many 
organizations to write applications specifi- 
cally for it," Silver explains. "These applica- 
tions may fail with IE8. Organizations that 
already moved to lEV or IE8 on XP have 
already addressed these applications. Those 
that have not need to address them now." J] 



Adoption 
Levels 

According to two webcasts 
held by Gartner in early 
June, participants reported 
their Windows V adoption 
plans as follows: 
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Sidestep 
Windows 7 
Problems 



XP Mode Will Help, But Testing Compatibility 
& Providing Ample Resources Are Key 




by Holly Dolezalek 
• • • 

Go AHEAD AND SAY IT: It's time to upgrade 
to Windows 7. Your enterprise has been 
running Windows XP or Vista for years, 
and it's time for a change. Don't be afraid; 
it's not as bad as it used to be, when the 
User Account Control ran amok and drivers 
were not only missing but also unavailable. 
WinV will have its share of challenges, just 
like any new OS, but if your company is in 
a Windows state of mind, here are some 
common problems that can be avoided alto- 
gether with the right steps. 

The Good News 

Remember those PC/Mac commercials 
that made fun of how often Vista asked, 
"Are you sure you want to do this?" That is 
a thing of the past, according to experts who 
have helped with many a WinV installation. 
Microsoft learned some lessons from the 



Key Points 



Enterprises that are upgrading fronn Win- 
dows XP will have a lot of adjustnnents to 
nnake and a nnore dennanding learning 
curve when nnoving to Windows 7. Chief 
annong those adjustnnents is the UAC and 
what it does and doesn't allow. 
The biggest issue with Win? installations is 
still application connpatibility. Before you 
install, test all of your enterprise's nnission- 
critical applications to nnake sure they're 
connpatible with Win7. 
Be prepared to outfit your connpany PCs 
with the hardware resources necessary to 
accommodate a more demanding OS that 
can do more than your old one could. 



Vista debacle. For example, the UAC (User 
Account Control), which was responsible 



for a lot of the difficulties — or at least 
annoyances — with Vista, has relaxed this 
time around, and Microsoft redesigned it to 
be a little more flexible and customizable. 

Also, although missing drivers may still 
be a problem for companies that have older 
hardware, there haven't been as many prob- 
lems with drivers this time. And although 
application compatibility is still potentially 
a problem for new users, WinV is more 
flexible than Vista and offers a Virtual XP 
mode for applications that simply can't 
work with WinV. 

Application Compatibility 

Still, there are potential problems with 
WinV, and one of those problems is appli- 
cation compatibility. The potential difficul- 
ty stems from several sources, and one of 
those sources is the UAC. "The UAC locks 
down machines against viruses, spyware, 
and other problems," explains Pete Lee, 



engagement manager for SWC Tech- 
nology Partners (www.swc.com). "But 
that added level of security does make it 
hard for users to maneuver." 

For example, although many IT pro- 
fessionals used to design applications to 
write log files to the Program Files fold- 
er, the UAC no longer allows that, nor 
does it allow access to some areas of the 
Registry after install. IT managers who 
don't test before installing are likely to 
find their applications breaking, and 
there are only so many ways around it. 

"In Windows V, you can still give your- 
self admin rights, but even at that level, 
they're locking out areas that people 
shouldn't play with for security reasons," 
says Chip Bates, director of product 
development for Converter Tech- 
nology (www . con vertertechnology .com) . 
"These are good security features, and 
most administrators will appreciate them 



A Look At Windows 7 
Service Pack 1 



What Does The First Big Update 
To Windows 7 Mean For SMEs? 



by John Brandon 
• • • 

Patch management is a skill that many 
data center managers never thought they 
would need. After all, for those with formal 
IT training, there's so much to learn in 
terms of virtualization strategies, network 
topologies, and server optimization that 
managing point releases with minor new 
feature enhancements and for security pur- 
poses is not exactly a higher calling. 

Yet, as every hacker knows, the window 
to a data center often cracks open during a 
new OS service pack deployment, mostly 
because there is a new change within IT. 
With Windows V, the new features are very 
minor, but the patch release warrants a 
well-intentioned rollout. 

Service Pack Concerns 

James Wedeking, solutions director at 
Technisource (www.technisource.com), 
says service packs have a history of imple- 
menting small changes in the OS that can 
have adverse effects on daily operations at 




a company, especially those that deploy 
the SP too quickly. 

"If you do not test SPl in some sort of 
offline capacity, you will run into trouble 
when you roll it out," says Wedeking. 
"Smaller businesses do not have a toler- 
ance for downtime." 

Wedeking says the main issue for 
SMEs is having the dedicated resources 
needed to properly test a service pack for 
an operating system. 
"It is whether a company has the band- 
width it needs in terms of 
planning, reviewing, identify- 
ing features, testing, and then 
rolling it out. Each of those 
could be a separate project in 
IT," says Wedeking. "[The ser- 
vice pack] becomes a separate ver- 
sion, and you have to treat it that 
way, but a small company might not 
have the experience to deal with it 
that way. They should have some line 
of support and resources to make the 
rollout a success." 
Wedeking says there is also a risk 
with any change in a data center and 
within IT. Sometimes, a "fix" creates a 
hole somewhere else. This can be allevi- 
ated by a good testing process. Wedeking 
says using resources such as Microsoft 
blogs and chat forums can be a great aid 
for small companies that do not have the 
dedicated team for dealing with service 
pack issues. 

"Understanding how you will deploy 
[WinV SPl] is helpful — you can auto- 
mate the deployment rather than visiting 
every workstation," says Wedeking. 
"You should find ways to roll out to 
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once their applications are configured to 
work under those constructions." 

James Wedeking, solutions director at 
IT services provider Technisource (www 
.technisource.com), warns that although 
there are fewer problems with WinV than 
there were with Vista, that doesn't mean 
there aren't any. "There are still some 
major applications, such as Adobe CSS 
and below, that were found to have 
issues with Windows 7 and did not func- 
tion properly," Wedeking says. "These 
must be taken into account before a 
deployment can take place." 

Microsoft has a spreadsheet, the 
Windows 7 Application Compatibility 
List, that includes all applications that 
have been verified to be compatible with 
Win7. Bates recommends checking that 
list and thoroughly testing any applica- 
tion that isn't on it before installing 
Win7 on a wide scale. 



XP Mode 

As many IT managers already know, Win7 
offers the option of running applications that 
can't play nice with Win7 in virtual WinXP 
mode. For organizations that go with the 64- 
bit version and find that their 32- or 16-bit 
applications just can't be rigged to work. 
Virtual XP might seem like a godsend, and it 
is — but it's a short-term godsend, explains 
Wedeking. "While the concept is outstand- 
ing, it is important to know that this is really 
a full Windows XP operating system running 
on a more integrated virtual PC platform for 
Windows 7," he says. "The system is a full 
system and functions as such, so it must be 
added to the domain and be included in a 
patch management program just as if it were 
a discrete Windows XP system." 

Additionally, adding XP Mode to an 
already complex deployment might offset 
the convenience of avoiding application 
incompatibility, in the long term if not in 
the short. "If time allows, you may be bet- 
ter off solving your application compati- 
bility issues with other options, such as 
compatibility shims, application virtual- 
ization, or just upgrading or replacing the 
application with a Windows 7-compatible 
option," Wedeking says. 

Don't Spare The Horses 

No matter how you slice it, a Win7 
installation is going to demand more from 
your infrastructure. Win7 chews up more 
processing power and memory than 
WinXP, and many shops are going to be 
upgrading from WinXP rather than Vista. 
PCs running Win7 need at least a IGHz 
processor, a gig of RAM for 32-bit or 2GB 
for 64-bit, and 16GB of available hard 
drive space for 32-bit or 20GB for 64-bit. 

If your budget is small and you're think- 
ing about making do, you might want to 



rethink that decision. "Given the very low 
cost of replacement hardware that already 
includes Windows 7, it is generally a big 
mistake to try to upgrade hardware and espe- 
cially peripherals (except for printers) that 
are more than three to five years old," says 
Phil Lieberman, president of Lieberman 
Software (www.liebsoft.com). "Most users 
should use the 64-bit version of Windows 7 
with a minimum 4GB of memory. We have 
seen Windows systems with 1GB of memo- 
ry, and it is simply not enough." 

Converter Technology's Bates, who has 
done a lot of testing in Win7, says that he 
hasn't tested to see how low it's possible 
to go with system resources, but he doesn't 
think the system requirements are overstat- 
ed. "You might be able to get by with less 
than Microsoft suggests, but you might 
see a slowdown and be unhappy with it," 
he says. 



Don't Underestimate 
The Importance 
Of Testing 



The short answer to the question of how 
to avoid problems: Test, test, and test 
again, and come up with a deployment 
strategy that includes ample time to do so. 
"Particularly for users who are upgrading 
from XP rather than Vista, Windows 7 is 
going to be a big adjustment," says Pete 
Lee, engagement manager for SWC Tech- 
nology Partners (www.swc.com). "Use 
Microsoft's Deployment Toolkit to create 
a strategy and manage the complexity of 
the install and test everything to make sure 
that what you need to work the day after 
still works." 



Key Points 



• A Windows 7 service pack is essentially 
a security fix and involves a patch man- 
agement process like any other software 
deployment. 

• Some of the fixes in SP1 are related to 
recent hotfixes for bugs, such as an 
error that causes damage to MPS files in 
Windows Media Player. 

• Most experts agree that it is best to 
install hotfixes as they appear and then 
use SP1 as a cumulative deployment to 
address all user needs. 



desktops and laptops [and] have a plan 
that does not interrupt the business flow." 

What To Expect 

According to official TechNet docu- 
ments for WinV SPl, the update, which 
will be available in beta at the end of this 
month, addresses the recent hotfix pro- 
gram in WinV and rolls these hotfixes 
into one release. This means that for 
clients that have not used Windows 
Update faithfully for regular security 
maintenance, the SPl release fixes any 
flaws in the OS related to security or, in 
some cases, addresses bugs and flaws in 
the OS itself. 

Wedeking notes that, for an SME 
without the staff to make sure updates 
are installed on every client, including 
desktop stations and laptops used by 
sales staff, WinV SPl is actually a help- 
ful release because it can help tighten 
security across the entire organization. 



This also helps in the event of legal discov- 
ery so IT staff can show they deployed the 
service pack to every workstation. 

However, according to Bob Muglia, pres- 
ident of the Server and Tools Business at 
Microsoft (www.microsoft.com), WinV 
SPl also has important features to support 
the new Windows Server 2008 R2 SPl. In 
that release, Microsoft has added the frame- 
work for cloud computing, especially for 
adding server virtualization features and 
then using WinV as a cloud client. 

Minor Tweaks? 

The new SPl release addresses several 
minor enhancements and fixes in the popu- 
lar desktop OS, mostly related to security 
issues. For example, a recent hotfix 
addresses a data corruption problem in 
Windows Media Player that caused damage 
to some recorded MPS files. 

Another fix addresses a blue-screen-of- 
death problem that was related to power 
management on some laptops. The error, 
which appears as STOP: OxOOOOOOOA, 



caused the computer to crash suddenly and 
with a blue- screen warning message. 

These security updates are not critical by 
themselves, but taken together, they make for 
a slightly less stable OS for end users. Yet, as 
Bryan Rhodes, the director of product man- 
agement for the Endpoint Management 
Group at Symantec (www.symantec.com), 
WinV SPl rollouts should take into account 
the severity of each minor patch update. 

"As a general rule for service packs vs. 
point fixes, there are two factors we look 
at: risk and impact," says Rhodes. "Any 
updates released prior to the service pack 
that address material risk for an organiza- 
tion should be rolled out ahead of the SP. 
Risk is determined by relevancy and severi- 
ty, which is usually a measurement that 
takes into account Microsoft's rating as 
well as other authoritative sources [that] 
can provide info about actual exploits." 

In the end, the SPl release is important 
for staying current, says Rhodes, and is far 
better than the other option: staying with 
the original release of WinV. 



Costs Of 
Deployment 



The costs of deploying a service pack depend on the staff you have 
available, the patch process you need to develop, and the costs of 
security breaches. 

"On the impact side of the equation, each update that is rolled out 
incurs cost (which is usually time and effort) and the potential for unin- 
tended consequences," says Bryan Rhodes, the director of product 
management for the Endpoint Management Group at Symantec (www. 
symantec.com). Rhodes says that testing and piloting each new secu- 
rity rollout can reduce those costs and help forgo the unintended con- 
sequences. Also, he says, "Low-risk updates can be considered for 
deferral to a larger delivery vehicle such as the upcoming SP1 ." 



I Wall Street Reinvesting In IT 
Analytics Assets 

A recent survey of U.S. financial professionals 
indicates that Wall Street's appetite for IT may 
be relatively ravenous after a long fast. IBM 
and SIFMA (the Securities Industry and Finan- 
cial Markets Association) surveyed 240 IT pros 
in the financial industry. They found that "trans- 
formational initiatives" are foremost on Wall 
Street's mind when it comes to budgeting 
through next year. In fact, more than 90% plan 
to spend more on analytics. Driving new invest- 
-s^ ments are analytics for systemic 
risk (55%), including compli- 
— ance (37%), client segmenta- 

tion (21%), and external fraud 
(1 3%). Risk analytics and 
compliance reporting are most 
likely to be outsourced, too. 



I Dell Buying Scalent 

Dell announced its plans to buy Scalent, a pur- 
veyor of virtualization management software 
for servers. Palo Alto, Calif., -based Scalent 
has worked with Dell on an OEM basis on pro- 
jects such as the Dell V/OE Infrastructure 
Manager provisioning system. Dell plans to 
incorporate Scalent's intellectual property into 
its Advanced Infrastructure Manager offering, it 
says. Neither company released details on the 
terms of the acquisition, although Dell expects 
to finalize it within its second fiscal quarter, 
which ends this month. 

I RIM Has A Remarkable Quarter 

BlackBerry maker Research In Motion reported 
upbeat results for its first fiscal quarter of 201 1 , 
which occurred March to May of this year. The 
Canadian firm shipped a record 1 1 .2 million 
devices, up 43% year over year; among those 
1 1 .2 million devices was the company's 100 
millionth device. Net income grew to $768.9 
million, representing $1 .38 per diluted share, 
up 41 % from the price per share last year. The 
company also announced a buyback of up to 
31 million common shares for cancelation over 
the next year, although it will have to secure 
regulatory approval in order to repurchase 
more than 10 million shares. 

I More Than A Quarter Of iPhones 
Experience Problems Within Two Years 

If you purchased an iPhone two to three 
years ago, there's a good chance you've had 
problems with it since. Square Trade, an 
extended warranty company covering i Phones, 
found that devices failed at a 26% rate within 
the first two years after purchase. The good 
news is that the failure rate is going down as 
improvements are made and devices are built 
to be sturdier. In an analysis done last year, 
iPhones were failing at a 31% rate over two 
years. Square Trade estimates that the more 
sturdy iPhone 3GS will have 20% fewer prob- 
lems than the 3G model and that the latest 
iteration, the iPhone 4, should be even stur- 
dier still; however, some analysts have 
expressed concern about the iPhone 4's 
all-glass back being prone to damage. 

I More Firms Outsourcing 
Network Security 

A study by Frost & Sullivan estimates that the 
MSSP (managed security service provider) 
market earned $1 .2 billion in revenue in 2009 
and that MSSP revenue will reach $3.9 billion 
by 2016. The analyst firm attributes the pre- 
dicted revenue increase to the growing need 
to protect enterprises from ever-increasing 
attacks targeted at organizations and the fact 
that MSSP services require no up-front cost 
and no initial investment. Large enterprises 
account for nearly 60% of MSSP revenue in 
North America, and Frost & Sullivan found 
that data center virtualization appeared to be 
the driving factor because it reduces data cen- 
ter footprints, making enterprises more 
inclined to outsource security operations in 
order to further reduce operating costs. 
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IT Salaries 
Inching Up 




- Resolve Windows 7 
Compatibility Concerns 



In spite of the recent economic climate, the 
salaries of IT employees seem to be making 
some progress. The results of international 
management consulting firm Janco Asso- 
ciates' "2010 Mid-Year IT Salary Survey" 
were encouraging. Total average compen- 
sation for all IT professionals has increased 
from $77,690 to $78,210, although total 
compensation for all positions in midsized 
enterprises has dropped slightly while that 
for larger enterprises has risen slightly. 

The Janco Associates study examined busi- 
nesses in a variety of industries across the 
United States and Canada. The study 
looked at large companies with gross rev- 
enues equal to or greater than $500 million 
and midsized companies with gross rev- 
enues less than $500 million. Rather than 
just strictly salaries, the study looked at 
total employee compensation, which in- 
cludes bonuses, perks, the fair value of 
supplemental compensation such as addi- 
tional time off, educational cost require- 
ments, business trips, car allowances, stock 
options, insurance, and 401 (k) programs. 

Study Group 

The study group included executives, mid- 
dle managers, and staff at large enterprises 
as well as their counterparts at midsized 
enterprises. Of these groups, executives at 
midsized enterprises were the only ones to 
have experienced a drop in salary. The rest 
saw an increase. Victor Janulaitis, CEO of 
Janco, says, "Smaller companies have 
management which typically are in-tune 
with the operations of the enterprise, and 
management is often paid with an eye 
toward company earnings performance vs. 
demand for particular skill sets," which 
could explain the drop in average salaries 
for executives at midsized organizations. 

ClOs fared the best. Their mean compensa- 
tion in large enterprises increased 7.52% to 
$1 81 ,533. Salaries for ClOs in midsized 
enterprises rose 3.73% to $169,303. "As 
productivity has improved, ClOs have been 
given much of the credit and they are getting 
more bonuses based on job performance," 
Janulaitis says. But these increases have 
yet to be passed down in the organization. 

In spite of the increase in salaries, the news 
is not all good. "The recession has cut IT to 
the bone, and there is no clear sign that IT 
jobs will regain the luster they had before 
the recession," Janulaitis says. IT is "stand- 
ing still" in small and medium-sized enter- 
prises, he says, and it will be difficult for 
CEOs to "see IT as something other than a 
cost center." 

by Patrick Kean 



FEATURE PACKAGE 



Get Microsoft's Newest OS To Play Nice 
With Your Existing Applications & Systems 



by Sixto Ortiz Jr. 
• • • 

After the poor reception Windows Vista 
received, Microsoft badly needed a hit to 
get back in the game. Fortunately for 
Microsoft, Windows 7 has turned out to be 
a reliable OS that is garnering minimal bad 
press and much praise. 

Although home users are adopting WinV, 
enterprises are moving a bit slower. And 
that should come as no surprise: It is a long 
process to prepare any enterprise for an OS 
migration because numerous issues must be 
resolved prior to rolling out the new install. 
One of the critical issues for administrators 
is making sure that WinV is compatible with 
existing enterprise systems. Enterprises 
looking for a successful upgrade must care- 
fully consider all compatibility aspects 
between WinV and existing systems to 
ensure a trouble-free migration. 

Ferret Out Compatibility Issues 

The greatest fear for admin 
istrators looking to upgrade 
to WinV is the potential lack 
of compatibility with exist- 
ing applications. If WinV is 
rolled out without regard to 
application compatibility, 
administrators will quickly 
encounter unhappy users 
who will pepper the help 
desk and support staff with 
phone calls. 

Enterprises should not 
underestimate the applica- 
tion compatibility chal- 
lenge, says Benjamin 
Gray, senior analyst at 
Forrester Research. Ac- 
cording to Gray, firms on 
Windows XP or earlier 
versions should antici- 
pate that about two-thirds , 
of their applications will 
not be natively supported 
on WinV. But, he adds, 
firms that deployed Vista or per- 
formed application compatibility 
testing against it should only have 
3 to 5% of applications that are 
not natively supported by WinV. 

An important issue is the fact 
that WinV uses a structurally dif- 
ferent user profile than WinXP, 
so administrators need to fully 



What About Training? 



A point ad nn in istrators nnay want to consider is 
the need for user training. As with any kind of 
IT upgrade, there will be a learning curve with 
Windows 7, especially for those users who are 
resistant to change. 

However, according to Ben-jamin Gray, 
senior analyst at Forrester Research, the 
WinV user experience is not significantly dif- 
ferent from Windows XP or Vista and thus 
shouldn't require a large training effort. After 



understand this difference before stepping 
into the migration, says Simon Rust, vice 
president of technology at AppSense 
(www.appsense.com). 

Chuck Nailen, technical trainer at Binary 
Research International, says that in order to 
prepare for a WinV migration, administra- 
tors should ensure that their organizations 
go through complete testing of all software 
and hardware to verify WinV compatibility. 
Also, adds Nailen, each company's compat- 
ibility problems are going to be unique, 
especially for custom-built in-house soft- 
ware that has been around for many years. 

One of the key ingredients to a successful 
WinV deployment is familiarity with the 
Microsoft Application Compatibility 
Toolkit, says Dan Griffin, founder and man- 
aging partner at JW Secure (www.jwsecure 
.com). This toolkit allows administrators to 
test existing software portfolios against the 
new OS; any issues discovered are diag- 
nosed using the toolkit, which can 
optionally assist in the creation of a 
shim. Also, he adds, WinV 
supports an XP Mode 
that is essentially a 
virtualized instance of 
WinXP running on 
top of WinV, which 
can bridge compati- 
bility gaps and help 
admins transition 
slowly into WinV. 

Software Upgrades 
Required? 

In order to suc- 
cessfully navigate a 
migration to WinV, 
administrators may 
need to use the XP 
Mode to run appli- 
cations that won't 
run on WinV, says 
Rust. However, if 
admins are look- 
ing to migrate to 
cheaper, under-pow- 
ered computers — such as netbooks — they 
should heed the fact that netbook hard- 
ware will most likely not be able to 
power both WinV and the virtual WinXP 
machine, he adds. 

Nailen recommends that enterprises 
upgrade all machines — especially those 
that will run the 64-bit version of WinV — 




all, says Gray, even though elements of 
WinV — such as the re-vamped Start menu, 
folder management, and search tools— are 
new, many users have already been exposed 
to Vista or WinV at home, greatly reducing 
the learning curve. 

But, he adds, IT must deliver some amount of 
training to strengthen understanding of what 
has and hasn't changed, particularly for users 
resistant to change. 



Key Points 



Although Windows V is a very reliable OS, 
enterprises may still face considerable 
application compatibility issues. 
Without planning or testing, a WinV migra- 
tion will quickly run aground. Planning is 
essential to success. 
WinV may require significant upgrades to 
system hardware such as RAM. 



to at least 2GB of memory. Even those 
enterprises that choose just to run the 32-bit 
version should consider upgrading to at 
least 2GB, if not 4GB, of memory. 

Gray recommends that administrators tie 
the OS upgrade to hardware upgrade pur- 
chases. This means treating OS and PC 
upgrades as one, which can be as easy as 
purchasing or leasing new desktops, laptops, 
and netbooks that come preloaded with 
WinV. Gray says this is the optimal approach 
for firms that have the resources and want to 
avoid the complexity behind hardware com- 
patibility testing and manual upgrades. 

Gray adds that administrators should 
invest in client management tools that auto- 
mate hardware and OS upgrades. However, 
he says, environments are becoming 
increasingly heterogeneous as Macs, net- 
books, and virtual clients spread into the 
enterprise. This means that the right man- 
agement tools are those that can handle 
these heterogeneous environments. 

An alternative for enterprises considering 
a migration to WinV is the use of application 
and desktop virtualization, says Forrester's 
Gray. Application virtualization builds effi- 
ciencies into IT processes by encapsulating 
applications into simplified images that sig- 
nificantly speed application deployment, 
improve remote access, remediate conflicts, 
and reduce service desk support calls. 

Avoid The Landmines 

So what are potential trouble spots, and 
how can administrators avoid them? Nailen 
says enterprises that don't do enough up- 
front planning or testing and expect an 
upgrade project to be completed quickly are 
likely to run into trouble. Many conversion 
projects, he adds, can take six to 12 months 
at a minimum to complete. 

Another pitfall is expecting networking 
and installation personnel to master the free 
Microsoft Deployment Tools in a short time, 
Nailen says, adding that there is a steep 
learning curve to the ins and outs of these 
products. There are other migration tools 
that are easier to use and learn, he says. 

User acceptance is critical to any pro- 
posed upgrade or migration in the IT world, 
and WinV is no different, says Rust. There- 
fore, the user experience is critical to the 
migration to the new OS, so IT must fully 
consider the implications of user profiles as 
part of the user experience and ensure that 
the migration appears seamless to users. 

According to Nailen, another key element 
is keeping users and management in the 
loop. Management is needed for project 
support, while users won't be happy if an 
upgrade is shoved at them without any input 
into the process. In other words, buy-in from 
stakeholders is required for success. □ 
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HOW TO 



Implement 
Storage Encryption 

Assess Your Environment & Choose The Most Appropriate Encryption Technology 



by John Brandon 
• • • 

In an age of legal discoveries, breaches 
over wireless networks, and scams on 
Facebook, data encryption has become 
more vital than ever. According to 
research by the Ponemon Institute, the 
average data breach at a company level 
costs $6.75 million. That's enough to 
send shivers down the spine of the most 
seasoned IT manager, but fortunately, the 
process of implementing storage encryp- 
tion is not as complex as it might appear. 

Starting Out 

According to Robert Fitzgerald, president 
of The Lorenzi Group (www.thelorenzi 
group.com), companies should first priori- 
tize data stores and determine what exactly 
should be encrypted. This can include lap- 
top drives, thumb drives, smartphones, 
servers, and even home computers used by 
remote employees. The process should also 
include the location of all of these data 
repositories, not just the devices, and 
should be as comprehensive and detailed a 
process as possible. 

Phil Ayres, founder of Consected 
(www.consected.com), says storage en- 
cryption technology is actually fairly 
mature, but companies should extend their 
surveys to include data backup systems, 
which may use an older form of encryp- 
tion that is not compatible with exist- 
ing technologies. 

"Encryption is not so hard, since there 
have been many available file-system 
approaches (such as directory encryption 
in Windows NTFS and partition encryp- 
tion in Linux LVM) for a while, but they 
have done a poor job of handling the 
issue of data backups," says Ayres. "If 
you make a backup of the data, it's often 
made in its original unencrypted form, 
which you then have to re-encrypt, or you 
have to keep backed up as a whole solid 
mass to ensure its integrity — and neither 
work particularly well." Ayres says open- 
source tools are available that help you 
encrypt each data file individually, which 
helps with long-term data storage. 

SMEs should also consider the policies 
they put in place. According to Michael 
Schultz, president of Message Infusion 
(www.messageinfusion.com), managers 
should go beyond just encrypting data with 
the latest technology product: They should 
also implement a process for encryption. 
This involves being able to demonstrate 
how and where data is encrypted in the 
event of a legal discovery. 

"Be sure you look at the higher-level 
issues of compliance and safe harbor," says 
Schultz. "Most storage encryption is put in 
place for the security benefits for those 
who understand hardware encryption, so it 
is best implemented for the performance 
benefits of moving encryption to the drive 
level. However, few are looking at the safe 
harbor issues of how to prove a drive was 
encrypted at the time of loss, theft, or com- 
promise, which is what keeps organiza- 
tions off the newspaper front pages." 



Key Points 



• Choose policies that will protect the 
connpany in a legal discovery, especially 
those that prove the encryption pro- 
cess worked. 

• Select your technology based on the 
needs of the organization, such as 
whether you typically do not want to do 
regular nnaintenance (with appliances) 
or prefer better key nnanagennent 
(with software). 

• Analyze worst-case scenarios for a 
breach to give you an idea of how nnuch 
to spend on storage encryption and how 
to protect connpany assets. 



Some of the policies put in place should 
also deal with unstructured data, says 
Gretchen Hellman, vice president of mar- 
keting at Vormetric (www.vormetric.com), 
and not just the actual data stores. 
"Encryption must protect both structured 
and unstructured data stores that can 
include database and file server files, fold- 
ers, documents, image scans, voice record- 
ings, and logs," she says. 

Encryption Options 

Once you have a good handle on the 
storage locations and policies required, the 
next step is to choose an encryption 
technology. According to Lou Branda, a 
storage technologies consultant with 
Accenture's Data Center Technologies 
consulting practice (www.accenture.com), 
there are three main options: appliances 
that encrypt all data at the company, 
backup solutions, and software encryp- 
tion technology. 

"Appliances are turnkey solutions that 
are favored due to their strong key man- 
agement platforms, ease of deployment 
and management, and ability to refresh 
the appliance hardware without worrying 
about the media type," Branda says. 
"They generally sit between the disk and 
the target media (tape) and can be 
deployed in either an FC-based SAN, 
SCSI (direct attached), or NAS (IP-based) 
. . . and therefore are very adaptable to the 
many backup architectures. They also 
offer the highest speeds. Remember that 
encryption increases the amount of time it 
takes to complete a backup due to the 
extra processing." 

Tape systems such as LTO-4 can also 
encrypt data. "IT firms will find that they 
are constantly planning for hardware 
refreshes that require the consideration of 
maintaining these specific tape formats," 
Branda says. "It basically means that no 
matter what, they either have to stick to 
the standard they have chosen or under- 
take a huge effort to migrate from older 
standards to newer or different standards. 
It also does not provide any ability to 
encrypt data to portable media." 

The third option is to use software 
encryption technology for storage medi- 
ums. This software is used between the 



backup media and the target server. 
Branda says this kind of encryption can 
lead to some slowdowns in backup time, 
but software has strong key management 
(for managing the encryption keys used to 
identify the data). Branda says some ven- 
dors have been slow to adopt open key 
standards, which would present a problem 
if you decide to switch from one encryp- 
tion technique to another. 

Costs Involved 

Costs for rolling out storage encryption 
vary by the technology you choose to 
deploy, but the storage encryption appli- 
ances are generally considered cheaper 
in terms of long-term maintenance. 
Regardless of which technology you 
choose, Hellman says the primary consid- 
eration has to do with a risk assessment 
based on what would happen in the event 
of a data breach. That's a good starting 
point, she says, because it helps determine 
how much a company should spend to 
protect investments. 

"When considering encryption costs, it 
is crucial to take a risk-based approach by 
considering what data needs to be protect- 
ed," Hellman says. "Enterprises must ask 
'What are the costs if this information gets 
out?' A recent Ponemon data breach dis- 
closure report shows the 2009 average 
cost of a data breach $204 per record. 
Customer attrition is another important 
hidden cost of public data breaches. This 
far outweighs the cost of an effective 
encryption solution." 

That helps an SME avoid some of the 
most dangerous pitfalls, she says: lack of 
central management, poor control over 
encryption keys, and interruptions in sys- 
tem management and performance. 



TOP TIPS 



Gretchen Hellman, vice president of mar- 
keting at Vormetric (www.vormetric.com), 
says to watch out for implementing too 
many encryption standards and strat- 
egies. "Avoid ending up with an explod- 
ing number of encryption products and 
all the related key management and 
policy management headaches that this 
will bring," she says. "Selecting encryp- 
tion solutions that have the broadest 
coverage over the largest number of 
potential systems will eliminate manage- 
ment headaches, as well as homogen- 
ize and consolidate data security 
policy management." 

Lou Branda, a storage technologies con- 
sultant with Accenture's Data Center 
Technologies consulting practice (www 
.accenture.com), says to avoid wasting 
resources encrypting data that does not 
need to be encrypted. "But do make sure 
important data is fully encrypted. Failure 
to do either could result in significant 
expenses related to data compromise or 
purchasing more equipment/licensing 
than necessary." 



Group Calls 

For More Spending 

On Alternative Energy 

The AEIC (American Energy Innovation 
Council), which counts Bill Gates and other 
prominent executives from major compa- 
nies such as Lockheed Martin and Xerox as 
members, has released a plan that lays out 
recommendations to increase U.S. govern- 
ment spending on alternative energy sources 
while also spurring innovation. Some ana- 
lysts believe the prominence of the people 
involved may be enough to start a serious 
conversation in Washington, D.C. 




"Obviously, those leaders, particularly Bill 
Gates, bring credibility, mindshare, and 
wealth to the table," says Darin Stahl, a lead 
research analyst for Info-Tech Research 
Group. "They have the ability to open doors 
and try to get meetings scheduled." Stahl says 
the members of the AEIC have considerable 
overall experience with innovation, creating a 
huge advantage because they know how to 
"take an idea from its early stages to commer- 
cialization," which Stahl believes will be nec- 
essary for this initiative to be successful. 

The AEIC recommendations include the cre- 
ation of an independent Energy Strategy Board 
that would create a National Energy Plan for 
long-term U.S. energy goals and the creation of 
Energy Centers of Excellence that would serve 
as R&D centers for energy-related innovation. 
Perhaps most important is the recommenda- 
tion that the government spend $16 billion per 
year in clean energy innovation. Stahl sees this 
as being the major political sticking point. 

"$16 billion is a politically debatable amount 
of money," Stahl says. "More importantly, the 
issue is not so much the money but how you 
will possibly create a mechanism and a 
process such that you can define, track, and 
measure innovation." Stahl contends the gov- 
ernment may misunderstand that "failure 
breeds innovation" and possibly stop funding 
some groups. He thinks it would be best to 
"get these innovators started, then get out of 
the way." 

More Than Money 

Alternative energy sources are already being 
debated by politicians, but that doesn't mean 
there isn't room for new organizations or plans. 
With the prominence of the BP oil spill in the 
news, it may be an opening for the AEIC and 
other groups to have their ideas seriously con- 
sidered. Regardless of what happens, Stahl 
says the upcoming conversations about ener- 
gy are going to be interesting to watch. 

"Getting to the point where there is at least 
some sort of centralized discussion and har- 
monization across the board is important, not 
for just the U.S., but other countries, as well. I 
think the BP oil issue just turns up the intensi- 
ty and lights a fire under the fact that we need 
to have this discussion," Stahl says. 

by Josh Compton 
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Drtable Storage 



CMS Products ABS-Secure 




The ABS-Secure encrypted external hard drive features 
USB 2.0 connections with capacities ranging from 160 to 
640GB. Designed for optimum portability and rugged 
durability, the ABS-Secure weighs just 7 ounces and fea- 
tures the CMS DataGuard shock-absorbing sleeve, 
which allows the drive to sustain a shock of 1 90Gs while 
operating and 1 ,OOOGs when not operating. ABS-Secure 
features 256-bit AES encryption and CMS' CE Secure 
Full Disk Encryption Software (which now supports 64- 
bit operating systems) as well as CMS' BounceBack 
Express Version 8.0 for backup and restore capabilities. 
ABS-Secure is powered by USB and spins at 5,400rpm. 

• QuickRestore lets you restore individual files or folders 

• Multidestination backup lets you back up to any local 
or mapped network drive simultaneously 

• Continuous data protection 

• Three-year warranty 

Best For: Sensitive data storage in rough environments. 

Price: $135 (160GB); $145 (320GB); $169 (500GB); 
$179 (640GB) 



CMS Products Vault OTG 




The Vault OTG encrypted flash drive uses 256-bit AES 
encryption to protect against prying eyes in the event of 
loss or theft. To increase protection, the Vault OTG sup- 
ports passwords of up to 64 characters. Available in 
capacities of 2GB, 4GB, 8GB, or 16GB, the Vault OTG 
comes preconfigured for immediate use right out of the 
box with preloaded software and drag-and-drop function- 
ality. To protect against threats from keyloggers. Vault 
OTG features a screen-displayed keyboard. 

• Powered by USB 

• Weighs 1 ounce 

• Includes 19-inch lanyard 

• Automatically locks when unplugged and requires a 
password to unlock 

• Leaves no trace of activity on your system 

Best For: Anyone who needs to use public computers 
but has sensitive data. 

Price: $31 (2GB); $40 (4GB); $60 (8GB); $111 (16GB) 



Compellent Portable Volume 




The Compellent Portable Volume is designed to jumpstart 
disaster recovery by cutting initial replication synchroniza- 
tion time from months to hours without the need for dedi- 
cated high-speed data links or duplicate arrays. Customers 
replicate data to encrypted portable drives from a Com- 
pellent SAN via a standard USB connection and then ship 
or travel with the drives to a remote site. The two high- 
capacity external drives offer 1 28-bit encryption and are 
housed in a ruggedized case for added durability. Once the 
locked case with the external drives arrives onsite, the 
administrator simply needs to plug the USB drives into the 
remote SAN, and Component's Enterprise Manager soft- 
ware automatically syncs the data to the site. 

• Utilizes two external hard drives preconfigured for and 
auto-recognized by Compellent storage 

• Uses a common USB 2.0 interface 

• Protects the drives with a ruggedized transport case 
equipped with a TSA-approved lock 

Best For: Organizations looking for a cost-effective way 
to replicate data between sites as part of a comprehen- 
sive disaster recovery strategy. 



Product 



Description 



IronKey S200 



e 

IRONKEY 

m 

The IronKey S200 is a physically and cryptographically 
secure USB flash drive with FIPS 140-2 Level 3 vali- 
dation. Used by government and enterprise custom- 
ers, the S200 features hardened physical security, the 
latest Cryptochip technology, active anti-malware, and 
enhanced management capabilities. 

• Tamper-resistant and tamper-evident rugged metal case 

• Anti-malware capabilities in hardware designed to 
provide a layer of protection from malware and pre- 
vent its spread onto networks 

• Includes extended-life flash memory capable of run- 
ning high-bandwidth applications such as data back- 
ups, virtual machines, or bootable mobile desktops 

• Enterprise Management Cloud Service for enforcing 
security policies, providing security and anti-malware 
updates, and tracking and auditing hundreds of thou- 
sands of devices 

Best For: Business personnel who need a portable 
device to store ultra-sensitive information. 

Price: Starts at $79 (1GB) 



McAfee Encrypted USB 
By SanDisk 




McAfee Encrypted USB drives, powered by SanDisk, 
impose mandatory hardware-based encryption on all 
files, as well as password protection to safeguard data 
stored on company-issued drives. These USB devices 
are designed to help enterprises mitigate the risk of data 
loss by ensuring that data on the USB device remains 
inaccessible unless an encryption key or password is 
provided. McAfee Encrypted USB drives are designed to 
boost security defenses with automatic, device-resident 
malware scanning. 

• Ultra-fast transfer speeds and a simple user interface 

• FIPS 140-2 Level 2-certified 

• Hardware-based 256-bit AES encryption 

• Mandatory access control for all files with strong 
password enforcement 

• Uses McAfee's ePolicy Orchestrator software for 
centralized management 

Best For: Enterprises that require stringent security for 
their portable data. 

Price: Starts at $32 



MXI Security Stealth MXP 
Bio & Stealth HD 




MXI Security's Stealth MXP Bio is a biometric USB drive 
with 256-bit AES hardware encryption that offers secure 
portable storage, digital identity features, and enterprise- 
level device management in capacities of 1 to 32GB. The 
Stealth HD features the same level of encryption and is 
available in both biometric and nonbiometric versions. 
The drive is ideal for organizations that need encrypted, 
high-capacity storage for portable storage, desktop, and 
OS environments and is available in 250GB, 320GB, and 
500GB capacities with up to three-factor authentication. 
Both devices are powered by MXI Security's FIPS 140-2 
Level 3-validated Bluefly Portable Security Processor. 

• Onboard anti-malware and antivirus protection 

• Up to three-factor authentication (biometric, password, 
smart card) 

• Multiuser capabilities (10 different users per device) 

• Waterproof, dust proof, and tamper evident 

Best For: High-security data protection. 

Price: Starts at $1 14 (Stealth Bio) and $300 (Stealth HD) 
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Processof's Product Spotlight highlights options available in key data center product categories, providing product information side-by-side for easy comparison. 

Compiled by Seth Colaner 



Iomega eGo Encrypt Plus 
Portable Hard Drive, 500GB 




The Iomega eGo Encrypt Plus Portable Hard Drive is 
designed to let you take sensitive data with you any- 
where. With a USB interface, hardware-based encryption 
(256-bit AES), and Iomega's Drop Guard Xtreme feature, 
the eGo Encrypt Plus Portable Hard Drive protects your 
data from unauthorized access and accidental drops. 
The 500GB hard drive is silver and includes the Power 
Grip band. The eGo Encrypt Plus Portable Hard Drive 
includes EMC Retrospect software and MozyHome On- 
line backup (2GB free) service. 

• Extra security with 256-bit AES hardware encryption 

• Drop Guard Xtreme feature protects the drive when 
dropped up to 7 feet 

• Compact size, measuring 0.75 x 3.84 x 5.57 inches 
(HxWxD) and 0.6 pound 

• Hardware-based encryption boosts performance 

• Can automatically back up your drive with EMC 
Retrospect and MozyHome Ultimate Online software 

Best For: Rugged applications that require durability 
and security. 

Price: $129.99 



Iomega eGo SuperSpeed USB 
3.0 Portable Hard Drive, 500GB 




Iomega's new eGo SuperSpeed USB 3.0 Portable 
Hard Drive features next-generation USB 3.0 technolo- 
gy for faster data transfer speeds. The drive is also 
backward-compatible with USB 2.0 and features a 
500GB capacity. The drive requires no external power 
supply, instead getting its power from the USB port on 
the computer. eGo drives include the Iomega Protec- 
tion Suite of Internet security and backup software, 
which includes Trend Micro Internet Security, Iomega 
QuikProtect, EMC Retrospect Express Backup, and 
MozyHome Online Backup software. 

• USB 3.0 speed 

• Includes security software 

• Free 2GB of storage from MozyHome 

• Three-year limited warranty 

Best For: Fast storage on the go. 
Price: $129.99 
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McAfee 



Nuvol-e Nimbus Mini USB 




The Nuvol-e Nimbus Mini USB comes with preinstalled 
encryption and compression software for simple, secure 
backups of your important data. The sleek Nimbus drive 
is designed for portability and can be plugged into your 
notebook, netbook, desktop, or mobile phone for fast, 
simple file transfers. 

• Built-in 256-bit AES encryption 

• Password-protected 

• Up to 2:1 automatic file compression 

• Multilanguage 

• Schedule your backups daily, weekly, or monthly 
Best For: Secure file transfers on the go. 

Price: $49.99 (8GB), $89.99 (16GB) 



Olixir Mobile DataVaultSDX 




The high-capacity Mobile DataVault 3DX is an easy-to- 
use, secure, rugged plug-and-play data storage tool. 
Mobile DataVault drives range in capacity from 320GB to 
2TB and can be used interchangeably with Olixir's USB 
2.0, FireWire, SATA, and eSATA cable interfaces. An 
optional 5.25-inch docking bay means the drives can 
also be used as hot-swappable cartridges with Olixir's 
chassis-based systems, which include 5.25-inch bays, 
desktop towers, and large-capacity 1 9-inch rackmount 
systems. The Mobile DataVault drives support Mac OS 
8.6 and higher, Win2000/XP/Vista, and Linux OSes. 

• Ultra-rugged portable hard drives can be used 
standalone with cable interfaces or in Olixir's chassis- 
based systems 

• Can survive nonoperational shocks of up to 1 ,200Gs 

• Can easily be repurposed, eliminating waste and 
maximizing ROI 

Best For: Maximum storage capacity needs in rough 
environments. 




MXI SECURITY 

A division of MEMORY FXPERT5 INTER M ATIONAL 



nuvoL-e 



Price: Starts at $350 
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Helping SMEs Go Tapeless 

Bus-Tech Is Blazing A Trail In The Storage Market With Its Tapeless Approach 



by Holly Dolezalek 
• • • 

It can be lonely in a market you've 
helped create. Companies that introduce 
products that don't fit within the current 
paradigm can spend a long time out in 
the cold, trying to convince potential 
buyers that what they have is what the 
buyers need — and that the fact that it's 
not like other products is a good thing. 

Bus-Tech, a maker of tapeless storage 
products for mainframe libraries (www 
.bustech.com), has emerged whole from 
that kind of situation and has done so 
with a product that its competitors are 
now emulating. That tells Jim O'Connor, 
Bus-Tech's director of product market- 
ing, that his company has changed the 
market, and for the better. "The reaction 
in 2001 was that you had to have tape, 
and we were mocked by [our competi- 
tors]," O'Connor says. "Those [compa- 
nies] now have tapeless options." 

A Range Of Options 

Bus-Tech has been around since 1987, 
and its first product was a single-board 
computer that could connect Ethernet 
networks to mainframe channels. Today, 
Bus-Tech's main claims to fame are its 
MDLs (Mainframe Data Libraries), a set 
of virtual tape library controllers. Bus- 
Tech's MDLs work with IBM-compati- 
ble and Unisys 2200 mainframes, and 
they vary by data transfer speed and by 
the number of channels and tape devices 
they can support. 



For example, the MDL-6000 can han- 
dle 1.5GB of data per second. It can sup- 
port between six and 12 FICON channels 
and between 768 and 1,536 tape devices. 
The MDL-1000, on the other hand, has 
one FICON channel and can deliver 
100MB of data per second to up to 256 
tape devices. 

Bus-Tech's Virtuent application runs 
on the MDL, and it handles the protocols 
and writes data sets to whatever storage 
arrays the customer has, including net- 
work-attached storage, storage-attached 
networks, WORM (write once, read 
many) media, and many other options. 

Changing The IVIarket 

Bus-Tech came up with its technology 
because of what was happening in stor- 
age: expanded capacity. "At first, the 
capacity of tapes was 50 megabytes, but 
soon that was a terabyte, and so relatively 
small data sets wasted tape," O'Connor 
explains. "Other companies were coming 



up with virtual storage managers to col- 
lect data sets for better tape utilization, 
and we decided to come up with a library 
that didn't need tape." 

With big competitors whose main 
interest was in a market that wanted tape, 
Bus-Tech needed muscle to help it break 
into markets that wouldn't necessarily 
be receptive to a lack of tape. There 
was plenty of resistance in those early 
days, which isn't entirely gone today, 
O'Connor says. So the company partners 



with disk vendors and uses their net- 
works of resellers instead of doing direct 
sales. That means that Bus-Tech's part- 
ners are sometimes storage vendors and 
sometimes resellers that are also storage 
vendors. The company has about 25 
resellers, and one of Bus-Tech's priori- 
ties is to reshape that network. "Most 
storage companies are either open sys- 
tems or mainframe, and very few bridge 
that gap," O'Connor says. "The ideal 
company understands both, but the primary 



skill set is mainframe, because you've 
got to be able to talk mainframe to 
these guys." 

Selling Well 

Although Bus-Tech is a U.S. -based 
company, a fair chunk of its business is 
overseas, about 40%. That international 
footprint is concentrated in Europe, but 
the company sees sales in Japan, Korea, 
South America, and Australia, as well. 

Bus-Tech does well in the financial 
and healthcare verticals, particularly 
banks, insurance companies, and stock 
traders. O'Connor notes that tapeless 
libraries have a particular appeal for 
financial companies, especially for pur- 
poses of compliance with e-discovery 
and requirements to maintain data for 
seven years in its original form with- 
out alterations. 

Most of its customers are larger com- 
panies, and for some time, the compa- 
ny's products focused on that end of the 



market. But Bus-Tech saw a need and 
interest in smaller companies, as well, 
prompting the creation of MDLs that 
would appeal to small to medium-sized 
enterprises. Its larger MDLs came up 
with options that included both the con- 
troller and the storage. For example, the 
MDL-IOOS is intended for companies 
with storage needs that aren't as exten- 
sive as larger companies; unlike Bus- 
Tech's larger MDLs, the MDL-IOOS has 
storage contained in the controller. The 



MDL-IOOV, available in FICON or 
ESCON configurations, also appeals to 
SMEs; it processes tape data to a VTL 
(virtual tape library) system. 

Ever-Changing Needs 

Storage disks get smaller, cheaper, and 
faster all the time, which is good for the 
storage market but means Bus-Tech has 
to stay on its toes, making sure that its 
products are configured to work with 
those changes. The company also has to 
keep up on storage technologies that 
aren't related to the actual storing, but 
with the handling of data as it's stored — 
encryption, deduplication, and so on. 
"We just added RSA key management to 
[Virtuent]," O'Connor says. "There are 
always new functionalities, and we have 
to determine which technologies that 
apply to the market should be added." 

Even if virtual tape has been accepted 
in the mainframe market to some extent, 
Bus-Tech still encounters resistance to 
the idea, and the company continues to 
educate customers about the advantages 
of going tapeless. O'Connor says the two 
primary arguments are control and space 



Bus-Tech 



reduction. "We talk to potential cus- 
tomers with 120-square-foot tape silos, 
and when you're talking about 17 of 
them, that's 2,000 square feet," he 
explains. "When you can talk about 
reducing that to one rack of 19 inches, 
taking up two tiles in the data center, 
that's a compelling argument." 

The control argument is more compli- 
cated but just as compelling, and Bus- 
Tech sales engineers are able to talk about 
being able to encrypt data as it's transmit- 
ted securely and using snapshots of data 
instead of the actual data to do testing. 

Bus-Tech's big goal is to expand its 
footprint in data centers. "We've got 
about 1,000 controllers in data centers 
now, and we're hoping to expand that," 
O'Connor says. He notes that the storage 
market is constantly changing, and 
there's no way to know whether disks or 
solid-state media will be the medium of 
choice or whether it will be a totally new 
technology that wins out. Regardless, 
O'Connor thinks Bus-Tech will be there 
whatever happens. "We're going to look 
for new markets to leverage our presence 
into, and our controller can handle all 
types of media, whether it's SATA, SAN, 
WORM — you name it," he says. 



BUS-TECH 



"Other companies were conning up 
with virtual storage managers to collect 
data sets for better tape utilization, 
and we decided to come up with 
a library that didn't need tape." 

- Bus-Tech's Jim O'Connor 



A Look At Bus-Tech Products 


Product 


Description 


MDL-100S 


Virtual tape library with FICON or ESCON channels; provides up to 4.5TB 
of RAID-protected storage 


MDL-2000 


Virtual tape library with two FICON or two to three ESCON channels; 
delivers 300MB of data per second and emulates up to 256 tape devices. 


MDL-4000 


Virtual tape library with between four and eight FICON channels or six 
and 12 ESCON channels. Can support between 512 and 1 ,024 tape devices. 
Includes up to four redundant independently operating emulation nodes, 
two redundant Access Control Points, and the ability to attach large-scale 
storage arrays. 


MDL-6000 


Virtual tape library with between six and 12 FICON channels and can emu- 
late 768 to 1 ,536 tape devices. Includes up to six redundant, independently 
operating emulation nodes, two redundant Access Control Points, and the 
ability to attach large-scale storage arrays. 

J 



(800) 284-3172 
www.bustech.com 

• Bus-Tech specializes in tapeless storage 
systems for mainframe libraries in enter- 
prises of all sizes. 

• The company's Mainframe Data Libraries 
work with mainframes from several big- 
name manufacturers, and its Virtuent 
application writes data to a variety of stor- 
age arrays, including NAS and SAN. 

• "We're going to look for new markets to 
leverage our presence into, and our con- 
troller can handle all types of media, 
whether it's SATA, SAN, WORM— you 
name it," says Jim O'Connor, Bus-Tech's 
director of product marketing. 
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Key Points 



The EPA's Energy Star Certification pro- 
gram is intended to identify energy con- 
sumption goals for categories of devices. 



Shared storage typically consumes about 
15% of the energy in a data center, and 
this amount is expected to grow. 



Don't just look for energy-efficient products — seek out 
energy-saving architectures (such as SSDs instead of 
HDDs) and methods (such as deduplication), as well. 



Energy Star 
Certification For 
Enterprise Storage 

More Efficient Systems Will Help Reduce 
Power Consumption, But Strategy Is Also Key 



BY DANIEL p. DERN 

Reducing energy consumption has become a 
growing priority everywhere, from homes and 
offices to data centers. 

In 1992, the U.S. EPA (Environmental Pro- 
tection Agency) established its Energy Star 
Certification program, which today has certifica- 
tions in more than 60 product categories. 

''Our objectives are to encourage the wide- 
spread adoption of appropriate hardware and software strategies to improve 
energy efficiency,'' says Una Song, product manager for the Energy Star pro- 
gram (www.energystar.gov). ''We also want to provide purchasers with the 
means to identify the most energy -efficient systems for their application, and 
we want to provide appropriate tools and information for building designers 
and managers to improve efficiency.'' 



ENERGY STAR 



■ DATA CENTER 
CERTIFICATIONS 

In terms of data centers, the EPA has 
already created certifications for servers — 
which typically represent two-thirds to three- 
quarters of data center power usage — and is 
now taking on storage, beginning with enter- 
prise storage systems, which account for 
about 10 to 15% of data center energy use. 

"Having an Energy Star rating for a stor- 
age system will help end users compare and 
contrast systems based on this characteristic 
knowing the methodology is consistent," 
says Noemi Greyzdorf, research manager at 
IDC. "It will also allow users to have ener- 
gy consumption be another feature to look 
at along with replication, protection, etc." 

The process began with a framework 
released by the EPA to define a taxono- 
my and other aspects and issues to be 
considered, including what kinds of data 
the EPA wants to collect on which to 
base its decisions. 

In April, the EPA released Draft 1.0 of the 
enterprise storage standard. The next steps 
will be more data collection and other input 
from vendors and other stakeholders, mov- 
ing along ultimately to a final specification. 

"We hope to finalize the specification 
by the end of the year, but since this is an 
interactive data-driven process, that can be 
subject to change," says EPA's Song. 
Once this is done, qualifying products 
bearing the certification will probably 
show up within six to 12 months. 



■ CERTIFICATION ALONE 
IS NOT ENOUGH 

It's important to understand that simply 
buying Energy Star-certified gear isn't 
sufficient. "The Energy Star certification 
qualifies the equipment, but it still needs 
to be used properly," Song says. 

Also, companies don't have to wait for the 
storage-related Energy Star program to 
become greener in their storage configura- 
tions. "Everybody should look at their cur- 
rent configuration," says Wayne Adams, 
chair of the SNIA's board of directors. "You 
may be able to justify a complete refresh 
based on power savings and capacity." 

In an October 2008 white paper, the 
SNIA notes, "There is no single silver bullet 
to dramatically reduce IT energy consump- 
tion and cost. Instead, multiple energy- 
efficient technologies can be deployed in 
concert to reduce the overall energy foot- 
print and bring costs under control." 

For example, moving from sub- 100GB 
drives to 1TB or from a hard drive to a 
solid-state drive can significantly reduce 
power use; similarly, power management 
features, such as spinning down disks and 
using variable-speed cooling fans, can 
reduce power consumption. 

"It's in how you use the equipment," 
notes Mike Rowan, CTO at IT analytics 
firm Viridity Software. "You can improve 
a disk drive's efficiency, but there's a bet- 
ter impact by turning unneeded drives off 
for five to 10 hours a day." 



Millions of people will lose 
irreplaceable computer files in tlie 
next year. For just pennies a day, 
Carbon ite™ Online Backup will 
make sure you're not one of them. 

Carbonite automatically 
encrypts and saves your files to 
secure off site data centers. It's 
quick and easy to set up on both 
PCs and IVIacs. Should anything 
ever happen to your computer you 
can easily restore your files. And 
you can securely access them 
anywhere— even from an i Phone or 
BlackBerry^^ smartphone. 

Visit carbon ite.conn and use offer 
code CB149 to start your 15-day 
FREE Trial and get an additional 2 
months FREE with purchase. 



We can't stop the virus 




Unlimited online backup 

Backs up files automatically 

Encrypts your files for privacy 

Easy setup for PCs and Macs 

Works quietly In the background 

Access your files from any 
computer, iPhone or BlackBerry^^ 

Only ^55 a year 

CARBdNITE^ 

Back It up. Get it back'." 




But we can make sure your files are in a safe place. 



Try it FREE nowdtcarbonite.com or call 1-800-31 8-9551 

Use offer code CB1 49 to start your FREETrial and get 
2 MONTHS FREE upon purchase. 

Cc)2010 Carbonite, Inc. 




Act now to protect your valuable computer files. 
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Web 
Filtering 

Putting It In Place 



I WinXPSP2 Users Face 
Increased Security Risks 

Now that Microsoft has ended support for 
Windows XP SP2, companies still using that 
version of the OS face increased security 
risks, according to Softchoice. In the days 
leading up to the OS' July 13 retirement, 
the company found that 45% of the sys- 
tems it analyzed were still running SP2, and 
nearly 80% of organizations have a high 
enough prevalence of SP2 to warrant the 
immediate action of upgrading their sys- 
tems to SP3 or to Windows 7. Softchoice 
says many users delayed SP2 deployment 
because it was such a major overhaul; how- 
ever, SP3 is a more minor incremental 
update, so companies have no compelling 
reason for delaying a move to SP3. Micro- 
soft currently plans to continue support for 
WinXP SP3 until April 2014. 

I Education, Training Pave Way 
To Broadband Adoption 

According to the Federal Communications 
Commission and several broadband adop- 
tion forums and groups, the United States 
should rely on local education and training as 
well as more effective computer donation 
programs in order to help spur greater broad- 
band adoption. The FCC says that 95% of 
households could utilize wired broadband, 
but only 65% currently subscribe, and that 
the low adoption rate is due not only to the 
price of broadband and computers but also 
because nonsubscribers do not understand 
the relevance of broadband use. In its na- 
tional broadband plan, the FCC suggested 
that the National Digital Literacy Corps team 
up with local organizations to train prospec- 
tive broadband users. 

I Federal IT Spending ^ 
Set For Growth 

Federal IT spending will ^^^^^H 
grow from $86 billion ^fl^^^^H 

in 201 to $1 1 2 bil- ^^^/^M 

lion in 2015, reflecting ^m/ IH 
a 5.4% growth rate, / w 

according to a ^m/ \ M 

recent report from INPUT. The budget shift 
is the result of the Obama Administration's 
plan to use technology for key cost-saving 
and transparency measures. Such mea- 
sures include the use of technology to help 
reduce energy costs and to improve gov- 
ernment engagement with the public and 
agencies. The report also indicates that 
overall spending growth has decreased, but 
because of the administration's manage- 
ment priorities and empirical spending, "IT 
spending has some protection from signifi- 
cant reductions." 

I MIT Researchers Envision A Faster, 
Cheaper Internet 

A revamp of router technology could lead 
to an Internet that runs 100 times — or even 
1 ,000 times — faster, according to an MIT 
research team. Researchers point out that 
computers and processors continue to grow 
in speed and power but that we will need 
a much faster Internet in the future if pro- 
grammers and consumers are to take ad- 
vantage of that increased computing power. 
At some point, the Internet itself will act as 
the bottleneck — a choke point researchers 
feel could be reached within three to five 
years. The use of optical fibers in routers 
could speed up the Internet enough to avoid 
that bottleneck. 



by William Van Winkle 
• • • 

A FEW YEARS AGO, email and spam were 
considered to be two of the top security 
threats enterprises faced. Now, the Web is 
the new hotbed of security threats, particu- 
larly from social networking sites. Web fil- 
tering, the technology of blocking certain 
sites or types of Web content, can help mit- 
igate this threat — if it actually gets used. 

IT managers are aware of the risks from 
social networking sites: A Symantec (www 
.symantec.com) survey of enterprises found 
that 84% of CIOs and CISOs considered 
social networking sites to be a serious threat 
to their security. Yet, SpamTitan (www. 
spamtitan.com), a security appliances and 
filtering software provider, surveyed 200 
SMEs in the first quarter of this year and 
found that while 76.4% claimed Web filter- 
ing was important, almost half of the 
respondents admitted to not filtering yet. 
Those that do filter are trying to prevent 
malware and maintain employee productivi- 
ty, the company notes. However, there are 
other security issues to consider. For exam- 
ple, social networking sites are notorious 
conduits for phishing and other social engi- 
neering exploits. They also allow dishonest 
or naive employees to send private compa- 
ny information beyond the firewall. 

To Block Or Not To Block 

According to Tony Lock, program 
director with industry analysis firm Free- 
form Dynamics, the biggest source of 
infection inside organizations today comes 
from Web browsing. "So on one level, the 
need to filter is obvious. But you still have 
to let people do their jobs, so in Web fil- 
tering, you have to be very precise. If you 
filter too much, the cost of annoying your 
staff can be very counterproductive." 

For example, in a separate report titled 
"Social Networking at Work," Symantec 
found that more than 53% of employees 



surveyed stated that they were surfing social 
networks for business reasons, meaning less 
than half were actually browsing the sites 
for personal reasons. Blocking social net- 
working sites in such instances can actually 
hinder an employee's productivity. 

Also, Lock concedes that it may be better 
to err on the side of leniency when it comes 
to filtering, especially when times are tough 
and the organization is under stress. A little 
relief in the workplace can go a long way 
toward sustaining morale, and this even 
extends to the use of streaming media, such 
as the wildly popular World Cup games. 
However, a little relief doesn't necessitate a 
lot of waste. It might make sense to have 
one shared display in the lunch room while 
filtering access to individual workstations. 
This can prevent bandwidth bottlenecks 
that might impair business-critical apps, 
such as videoconferencing. 

Implementation Tips 

Before purchasing anything, companies 
should begin their Web-filtering process 
by analyzing how their machines are being 
used. What sites are being visited? What 
proportion of these sites is inappropriate? 
Are there certain times of the day or week 
when social networking traffic (particular- 
ly YouTube) is impacting regular business 
activities on the network? Without a prop- 
er usage model, it's difficult to construct 
effective filtering policies. 

When deploying filtering, SpamTitan 
advocates a layered approach. Companies 
need to deploy a variety of tools to monitor 
and manage how individuals use new Web 
applications on premises. The best solu- 
tions allow for flexible policy controls, 
giving different individuals or groups dif- 
ferent access rights depending on their 
level of business need or the company's 
general level of personal use leniency. 
Also consider how well a filtering solution 
might dovetail with the latest virtualized 



and/or cloud-based environments that are 
increasingly becoming the norm. 

"Today's Web Gateway solutions need 
to provide more functionality than URL 
content checking," says Symantec product 
manager Sergi Isasi. "The primary goal 
when implementing a Web Gateway solu- 
tion should be to protect the organization 
from malware and ensure access to exter- 
nal business-critical applications is not 
compromised. Leading products will pro- 
vide that base level of functionality but go 
beyond to provide advanced levels, such 
as inbound anti-malware and application 
controls. The more advanced products 
will add the ability to identify infected 
clients and outbound anti-malware and 
content control." 

Although leniency in Web and social 
networking access might be advisable, that 
doesn't mean that everyone should have it. 
Ronan Kavanagh, CEO of SpamTitan, rec- 
ommends that only employees that use 
social networking for the company's 
advantage have access to it. 



Not least of all, remember to communi- 
cate effectively with employees. Freeform 
Dynamics' Lock emphasizes that it's im- 
portant to ensure that staff understands 
what filtering is about to happen and why. 
"The usual mistake is being too strict up 
front and not communicating properly. So 
one day, people are accessing the Web in a 
certain way, and the next day, they can't 
reach sites they were just on. At worst, that 
will generate morale problems, and at best, 
it's going to generate support calls to IT 
because nobody knew it was coming." E9 



On average, how many times per day do you access social networking 
sites sucli as Facebook or YouTube from work? 
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As evidenced in this graphic, Symantec (www.symantec.com) survey 
data reveals 62% of respondents check social networking sites every 
day while on the job. However, further data detailed in the company's 
"Social Networking at Work" report reveals that less than half are 
using social networking sites for personal use. 



Source: Symantec 



Key Points 



• The Web, and social networking in partic- 
ular, is widely recognized as a key nnal- 
ware threat vector. Despite this, nearly 
half of all enterprises don't currently 
ennploy Web filtering. 

• Sonne believe that ennployees should 
have access to social networking, both for 
business and personal use, for innproving 
nnorale. That said, not every ennployee 
necessarily needs to or should have 
access to these sites. 

• Web filtering solutions should nnake nnan- 
aging filtering policies easy. Many policies 
will be consistent across enterprises, but 
Sonne will need to be tweaked and updat- 
ed periodically, and this should be a 
quick, effective process. 
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VoIP Deployments 
In Smaller Enterprises 



Are You Ready To Make The Move? 



by William Van Winkle 
• • • 

Late in April, UK-based Star (www 
.star.co.uk), a hosted services provider, 
made headlines when it announced that 
41% of the SMBs it surveyed had already 
deployed VoIP and another 20% planned 
to deploy it over the coming year. This 
echoes similar results found across the 
pond in March by Infonetics Research 
(www.infonetics.com), which projects 15% 
growth in phone extensions over the next 
two years, nearly all of which will be IP 
solutions. Interestingly, though, Infonetics 
Directing Analyst Diane Myers expects less 
than one-third of total VoIP service revenue 
will come from enterprise users by 2014. 
Why the ongoing hesitation for enterprises 
to embrace VoIP? 

The answer apparently doesn't lie in 
security concerns. According to Star's 
announcement, "only 9% of all respondents 
viewed security concerns as a potential 
issue . . . [showing] a marked contrast with 
perceptions from just three years ago when 
nine out of 10 companies surveyed by 
event organizer InfoSecurity Europe had 
VoIP security concerns." Instead, Star cites 
call quality, reliability, and network capa- 
bilities as more dominant concerns, and the 
No. 1 reason enterprises gave for not adopt- 
ing VoIP was lack of on-staff expertise. 

Buying Knowledge 

These days, even small enterprises are 
likely to have IT resources on staff with at 
least some communications expertise. The 
problem is that IP communications involve 
a whole different knowledge set than con- 
ventional PBX-based telephony. Many of 
the concepts may be similar, but the imple- 
mentation of those concepts is different. 

"Phone systems in general almost always 
require some expertise," says Mark Mon- 
day, vice president and general manag- 
er. Small Business Technology Group, 
Cisco (www.cisco.com). "Settings like hunt 
groups, IVRs, and dealing with trunks can 
seem complex to the average data-trained 
person. However, you're seeing a lot more 
networking resellers installing voice since 
VoIP systems utilize the same data infra- 
structure vs. a separate set of lines." 

With vendors such as Cisco and Avaya 
putting new emphasis on voice systems 
training for their reseller partners, there's no 
shortage of possibilities when shopping 
for VoIP solution providers. Enterprises that 
want to get running with VoIP as soon as 
possible will likely outsource the task to 
these providers rather than take the weeks or 
months needed for trying to handle deploy- 
ment in-house. Moreover, even if in-house 
staff manages to achieve 98% deployment 
competency, that 2% can still yield a lot of 
costly delays and support headaches. 

"Enterprises are probably going to use 
channel partners, at least for the initial 
implementation and a lot of the end-user 
training," says Mark Massingham, prod- 
uct and solutions marketing manager at 
VoIP products provider Avaya (www.avaya 
.com). "Plus, these partners are experts in 
preplanning — cataloging users, setting up 
voice messaging [and] auto-attendant. 



Key Points 



Lack of IT staff experience remains 
the leading impediment to enterprise 
VoIP adoption. 

Managed and hosted VoIP services 
can solve the VoIP expertise barrier, but 
enterprises shouldn't expect large, imme- 
diate cost savings. 

In on-premises or managed solutions, 
having modern, capable VoIP hardware 
and monitoring network bandwidth is key 
for long-term VoIP ROI. 



establishing hunt groups, managing call 
routing [or] call rolling to another location. 
You can't just throw one of these systems in 
and hope for the best." 

Massingham notes than when the 
deployment is finished, many enterprises 
will have their IT staff take over the main- 
tenance. The training needed for mainte- 
nance will also likely come from the 
installing channel partner as part of a larg- 
er services agreement. 

Managed Or Hosted? 

Of course, some enterprises will choose 
to focus on their core competencies rather 
than dedicate resources to expanding IT 
support. With a managed VoIP service, the 
enterprise owns and keeps all voice equip- 
ment and systems on-premises, but a third 
party manages the hardware and software. 
With hosted services, the systems and soft- 
ware are maintained remotely, leaving only 
the necessary phones and controllers within 
the office. This transitions VoIP into an 
operational expense model rather than a 
capital expense. 

Although this sounds advantageous, the 
benefits don't come free. Many people 
make the mistake of thinking that VoIP 
savings are instantaneous. But long-term 
savings usually only follow after some 
short-term costs. With managed services, 
the organization has to contract for the ser- 
vice plus purchase all necessary hardware 
up front. With a hosted model, providers 
usually charge on a per-seat basis, generat- 
ing an ongoing expense. Either way, this 
can put a crimp in managed or hosted adop- 
tion for those with pinched budgets. 

Moreover, some managers resist out- 
sourcing their VoIP because they feel it 
will result in a loss of control over a key 
part of their operations. 



"You don't know how that provider is 
delivering the service, how they support 
you, or how issues are escalated," says 
Jayanth Angl, senior research analyst at 
Info-Tech Research. "If you have an on- 
premise system, the organization has the 
ability to allocate more resources to a sys- 
tem, to monitor and adjust service levels as 
required. If you outsource, you may lose 
that flexibility. The concern would be man- 
aging that service provider relationship day 
to day as well as the costs of the solution." 

Maximizing Returns 

Despite the hurdles, most sources agree 
that VoIP can save enterprises money and 
offer greater functionality than traditional 
non-IP telephony. The ROI proposition 
improves if enterprises make sure that VoIP 
services aren't going to negatively impact 
their other network operations. Presumably, 
bandwidth monitoring was done before 
deployment to make sure that sufficient 
capacity was available for the VoIP loads. 

Cisco's Monday notes that even though 
voice doesn't use much bandwidth, quality 
expectations leave little room for error. This 
is why modem LAN switches and routers 
built to handle real-time traffic and ensure 
voice packet prioritization are so critical. If 
deployment is done internally, IT staff must 
understand how to properly configure such 
hardware for optimal performance. 

"VoIP is very sensitive to latency, so it 
does not deal well with network conges- 
tion," says Netgear's Peter Newton, direc- 
tor, business product marketing (www.net 
gear.com). "Using VLAN technology to 
clearly separate voice traffic from data traf- 
fic as well as layer 2 or layer 3 QoS to prior- 
itize the voice traffic should ensure good 
performance. If possible, select the codec 
with the least compression, as that will 
reduce the impact of any single lost packet. 
Also, we recommend running on Gigabit 
Ethernet to maximize throughput." 

Companies need to continue monitoring 
network bandwidth after installation and 
watch for any new data apps or usage sce- 
narios that might impair voice or other ser- 
vices. Avaya' s Massingham points out that 
just as new apps can disrupt VoIP perfor- 
mance, if only by constricting the organiza- 
tion's bandwidth bottleneck, the new VoIP 
users can slowly strangle other seemingly 
noncompeting apps. Smaller enterprises with 
less aggregate bandwidth are particularly 
susceptible, so ongoing monitoring and 
management remains paramount. 



North American Enterprises Plan To 
Increase Use Of Hosted VoIP Services 



Infonetics projects that hosted 
VoIP solutions will gradually 
gain in popularity over in-house 
options, perhaps out of enter- 
prises' reluctance to extend their 
IT support to the extra demands 
of IP voice services. 



Source: © Infonetics Research, Communication 
Expenditures and IP PBX Vendor Ratings: North 
American Enterprise Survey, March 2010 



2010 



2012 




Hosted: Extensions on TDM Centrex or hosted VoIP services 
In-house: Extensions on customer-owned TDM and IP PBXs 



I Finland Makes Broadband Access 
A Legal Right 

The Finnish government has ruled that its 
citizens are entitled to reasonably priced 
broadband access as a basic right. FICORA 
(the Finnish Communications Regulatory 
Authority) ruling mandates that local telecom 
providers offer this service — at least 1 Mbps — 
to both home and business users in much the 
same way that phone and mail services are 
offered. Additionally, 26 local telecoms will 
function as so-called "universal service 
providers." Cost for the service may vary 
according to local tariffs, but FICORA feels 
that a monthly fee of 30 to 40 Euros (or about 
$37 to $47) is reasonable. 

I White House Freezes 
Financial Systems Projects 

The White House has decided to put a num- 
ber of IT projects on hold in an effort to 
reduce costs and spend money more effi- 
ciently. The attempt to overhaul aging finan- 
cial management 
systems was 
projected to 
cost $20 bil- 
lion in total, 
with another 
$3 billion 
spent per year 
in maintenance 
costs. The move is 
controversial, with some parties concerned 
that the halt will disrupt too many workers 
and end up costing more in the long run. 
Federal CIO Vivek Kundra will review the 
situation and look to modernize the gov- 
ernment's IT strategy, likely cutting poor- 
performing contractors and possibly looking 
at cloud computing solutions. 





I Sony Recalls Some VAIO Models 

Sony is recalling several of its VAIO F and 
C series notebooks because they're at risk 
of overheating. The company says about 
535,000 notebooks sold since January 
could be at risk for the problem, which is 
caused by an error in the internal tempera- 
ture management system. The company is 
also recalling an additional 1 1 1 ,000 note- 
books it says have less serious problems 
with the BIOS software. The overheating 
presents a potential burn hazard for users 
and can cause deformation of the product's 
keyboard or external casing, according to 
Sony. The company is urging owners of the 
affected notebooks to download a firmware 
patch from its Web site (esupport.sony.com) 
or to return the unit so the company can 
install the firmware. 

I Gartner Estimates Cloud Growth 

According to Gartner, global cloud services 
revenue is expected to increase by 16.6% 
and reach $68.3 billion by the end of 2010. In 
2009, cloud services netted $58.6 billion in 
revenue, and Gartner estimates the industry 
will grab $148.8 billion by 2014. Additionally, 
Gartner projects software as a service, plat- 
form as a service, and infrastructure as a ser- 
vice will earn a combined $112 billion by 
2015. In a statement, Ben Pring, research 
vice president at Gartner, said that organiza- 
tions are seeing the benefits of core cloud 
ideas, such as pay for use, multitenancy, and 
external services, throughout the past 18 
financially unstable months. 
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I Broadband Users 

Are Happy With Their Service 

The FCC recently indicated that it is taking a 
hard look at broadband speeds in the United 
States, which lag behind many of those found 
in other developed countries. The Leichtman 




Research Group came out in defense of the 
ISPs with its recent survey, which found that 
although 77% of U.S. broadband customers 
are unsure of what their broadband speeds 
are, 71% are very pleased with the service. 
Those who were not satisfied only represented 
3% of the sample. Just 26% of those polled 
said they wanted faster Internet speeds, while 
significantly more— 44%— said that they are 
not interested in higher-speed Internet. The 
survey concludes that the demand for fiber 
optic Internet access has yet to materialize, 
something Verizon appears to have confirmed 
when the service provider put the brakes on its 
FiOS fiber-to-home rollout. Of those who do 
not currently subscribe to broadband, less 
than 1 % claim that cost is a barrier. 

I IT Fears Unauthorized Devices 
& Applications 

Cisco recently polled more than 500 IT pro- 
fessionals and discovered that the security 
liabilities they fear most are users accessing 
the network with unsupported mobile devices 
and running unauthorized applications. Ac- 
cording to Cisco's findings, more than half of 
those polled said that their employees are 
using unsupported applications, and 41% say 
they are accessing the network with those 
devices. Of the respondents who said em- 
ployees were using unauthorized applica- 
tions, 68% said social networking sites were 
the biggest offenders. One-third of those who 
said employees were using unauthorized 
devices such as smartphones said that those 
devices have caused some form of security 
breach or data loss. When these devices are 
blocked, however, employees commonly cir- 
cumvent the policies to continue using them. 
A majority of the IT professionals, 71%, said 
that policies that are too harsh can make it 
difficult to hire and retain younger employees. 

I Dell Forecasts Revenue Jump In 2011 

Dell says it expects a 14 to 19% increase in 
fiscal 201 1 revenue as customers begin to 
replace their aging computer systems. The 
announcement, which came at Dell's annual 
financial analysts' conference, meets ana- 
lysts' expectations of a 16% increase in rev- 
enue. Dell also said that its full-year operating 
income would rise between 1 8 and 23% com- 
pared to a year earlier. However, investors 
are worried whether the computer maker, 
which has steadily lost market share to HP 
and Acer, can maintain profitability. 

I Smartphones To Take Over 
GPS Market 

According to research firm iSuppli, smart- 
phones, rather than G PS-only devices, will be 
the leading navigation-based gadgets in the 
coming years. The company predicts that by 
2014, 297 million smartphone navigation units 
will be sold vs. the 81 million units projected for 
this year. Such units are either sold with the 
device or separately as an added application. 
The Apple iPhone is the No. 1 smartphone 
platform for post-sale downloadable navigation 
applications. Nokia and Android-based devices 
are expected to climb to the top of that list, as 
well. Ovi Map turn-by-turn navigation is includ- 
ed in Nokia smartphones, and Google Maps is 
included in Android smartphones. 



SERVERS 



SIX QUICK TIPS 



Rebuilding 
Servers 



Know What To Do & When 



by Bruce Gain 
• • • 

Server life cycles can typically be four 
to five years, but admins often face sce- 
narios in which server performance does 
not meet expectations long before the 
machines are scheduled for replacement. 
In many cases, it can make sense to 
rebuild servers instead of paying more 
money to replace them. Here are some 
things to keep in mind to get the best value 
for your money when rebuilding servers. 

Make Sure The Infrastructure 
Can Handle The Rebuild 

After determining that it makes more 
sense to invest in a rebuild than to buy 
new machines, the infrastructure required 
to handle the new power loads needs to be 
taken into consideration. This involves 
assessing the impact on power and cooling 
for the entire rack, says Nik Simpson, an 
analyst for the Burton Group. 

"For example, if you have a rack full 
of servers that are close to exhausting the 
power feed or which are already causing 
cooling problems, then adding a lOGbE 
NIC, 128GB of memory, and another 
processor to each server may be buying 
yourself a world of hurt by upgrading," 
Simpson says. "Similarly, adding a quad- 
port Ethernet card plus four cables from 
each server in the rack may cause you 
some serious airflow problems at the 
back of the rack if you don't plan 
this carefully." 

Get The Right Components 
At The Right Price 

The rebuild process can serve as an 
opportunity to realize solid performance 
gains without making a heavy invest- 
ment. For example, a very high-end 
processor configuration can be limited by 
a lack of RAM capacity, which can be 
remedied by just adding more memory 
modules. Or on the network end, replac- 
ing the NIC can boost server access speed 
across the LAN. However, it is important 
to correlate the direct impacts the new 
parts will have and their relationship with 
the other components for each part before 
it is added. 



"Understand where your performance 
bottlenecks are before deciding on an 
upgrade," Simpson says. "For example, 
if the server is memory-bound and 
there's no room for more memory, then 
putting an SSD in the server will cost 
you money and deliver disappointing 
results vs. buying a server that can han- 
dle more memory." 

Time can sometimes be on your side 
when adding individual components 
because prices tend to fall during the 
months and years after their release com- 
pared to what parts would cost when the 
machine was originally purchased. 

"A couple of years later after you've 
purchased the server, some parts are stan- 
dard and easily available, which you can 
find for cheaper prices," says Brad Kowal, 
assistant data center director for Shands 
Healthcare in Florida. 

Find The Right Project Leader 

Rebuilding servers is often seen as part 
of a checklist of things to do without much 
thought given to who is in charge of the 
project, despite the complexity involved. 
Part science and part art, upgrading 
servers with the right parts, assessing 
whether or not a rebuild is warranted in 
the first place, and determining how appli- 
cations can benefit involves a special skill 
set. It is also likely that someone on your 
staff not only has the knowhow to see the 
project through to completion but will 
actually enjoy doing it. 

"When you have people that are knowl- 
edgeable, driven, and have fun, it makes 
doing any job better," says Lonnie Laub, a 
senior technician for Stallard Tech- 
nologies (www.stikc.com). "For rebuild- 
ing servers, this means people with a great 
troubleshooting mind and people that 
keep up on new and old technology and 
who are friendly with both co-workers 
and customers." 

Indeed, the project is more than just 
putting new parts and software in the box, 
Laub says. "Anyone can rebuild a server, 
but making sure all components are 
accounted for, updated, and tested is a 
huge benefit for customers," Laub says. 
"Once updated, running through any 



BONUS TIPS 



■ Check the OS. You may 

have checked that the rebuilt 
server can handle the appli- 
cations, but what about the 
operating system? "Rein- 
stalling an OS and finding 
out later that you do not 
have the install bits or disks 
for the applications can be a 
serious issue," says Scott 
King, vice president of data 
center operations for The 



Planet (www.theplanet.com). 
"Many times, software is 
installed from media that has 
been lost, moved, etc., months 
or years earlier. A little plan- 
ning here can reduce the 
downtime for the ser- 
ver significantly." 

■ Check the warranties. 

Rebuilding servers can, 
in some cases, void the 



warranty. "If this is a do-it- 
yourself upgrade with parts 
purchased from a third party 
rather than from the OEM, 
then you may invalidate the 
warranty, so check with your 
vendor about warranty con- 
ditions before doing this," 
says Nik Simpson, an ana- 
lyst for the Burton Group. 



Best Tip: 

Know When 
To Rebuild 



A crucial part of the rebuild process is 
determining when it is appropriate to 
revamp a machine and when it makes 
more sense to just replace it. When 
making this decision, it is necessary to 
weigh the costs of revamping the server 
as a percentage of the cost of a new 
machine. For example. Brad Kowal, assis- 
tant data center director for Shands Health- 
Care in Florida, says that if a new server 
costs $5,000 but it is possible to upgrade 
the old one so that it offers the same level 
of performance for only 10 to 20% of the 
price of new server, then investing in a 
rebuild is a no-brainer. However, for per- 
centages that are a lot higher, other vari- 
ables have to be taken into consideration, 
such as departmental budgets and whether 
it will meet demands for a couple of years, 
Kowal says. 

The age of the server must also be taken 
into consideration, regardless of its com- 
puting capabilities. "If the server is more 
than four years old, then don't even consid- 
er upgrading it," says Nik Simpson, an ana- 
lyst for the Burton Group. "The advances in 
power efficiency and performance are so 
large that a new system will pay for itself 
in power savings over a relatively short 
period, particularly if it's combined with 
server virtualization." 

Most Practical Tip: 

Test The Backup 
Before The Rebuild 

The backup system has functioned flawless- 
ly in the past, but because the data on the 
server hard disks will be wiped clean as part 
of the rebuild process, now is the time to 
make sure you can really rely on it. "Do not 
assume that previously configured backups 
are working," says Scott King, vice president 
of data center operations for The Planet 
(www.theplanet.com). 



diagnostics to make sure the system will 
perform as needed when it gets to the cus- 
tomer is a necessity." 

Get The Right Parts For The Application 

Rebuilding the server hardware to meet 
the needs of new applications is more than 
just making sure that the requisite proces- 
sor horsepower and memory capacity are 
in place to do the job. Very often, applica- 
tions require specific features that the 
CPU or other components have in order to 
realize optimal performance. It is thus cru- 
cial to study the application in careful 
detail to determine how it will run on a 
given rebuilt server configuration before 
doing a rebuild. 

A case in point is virtualization, for 
which some older components in a 
rebuild might not serve as a good fit. 
"When the upgrade is being driven by 
a move to server virtualization where 
you plan to repurpose older servers, 
make sure that the older servers will 
be suitable for virtualization before mak- 
ing the upgrade," Simpson says. "For 
example, older processors lack the hard- 
ware-assisted virtualization features 
found in more modern systems, and no 
amount of hardware upgrades will fix 
this problem." 
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Supermicro Servers 



SuperServer1026T-6RFT+ 




The SuperServer 1026T-6RFT+ is a 1 U rackmount 
server that boasts an Intel Xeon 5600/5500 Series 
processor with QPI (QuickPath Interconnect) up to 
6.4GT/S. Additionally, the 1026T-6RFT+ can support 
up to 192GB of memory. Its left side is full height and 
length with two (x8) PCI-E 2.0 slots. The right side is 
low profile (5.5 inches deep) with one (x4) PCI-E 2.0 
slot. Customizable storage is also available thanks to 
the eight 2.5-inch hot-swap SAS-SATA drives. 

• LSI 2108 8-port 6Gbps SAS controller; RAID 0, 1 , 5, 
6, 10, 50, 60 

• Intel 82599EB 10Gb Ethernet controller with two 
SFP+ interfaces 

• Intel 82576 dual-port Gigabit Ethernet controller 

• 700W gold-level redundant power supply 

• Super X8DTU-6TF+ integrated board 

Best For: HPCC node, data center, data farm, front- 
end server, and other compute-intensive applications. 



SuperServer 2026T-6RFT+ 




With an Intel Xeon 5600/5500 Series processor and 
Intel 5520 chipset, the 2U rackmount SuperServer 
2026T-6RFT+ offers up to 6.4GT/S QPI. The 2026T- 
6RFT+ can hold up to 192GB memory. The right side is 
low profile (5.5 inches deep) with one (x4) PCI-E 2.0 
slot, while the left side is full height and length with two 
(x8) PCI-E 2.0 slots. This server boasts a Platinum- 
level redundant power supply at 920W. 

• LSI 2108 8-port 6Gbps SAS controller; RAID 0, 1, 5, 
6, 10, 50, 60 

• Customizable storage available through 1 6 2.5-inch 
hot-swap SAS/SATA drives 

• Integrated IPMI 2.0 with dedicated LAN 

• 920W high-efficiency redundant power supply 

• Super X8DTU-6TF+ integrated board 

Best For: HPCC node, data center, data farm, front- 
end server, and other compute-intensive applications. 



SuperServer 8016B-TF 




The eight-core, four-way SuperServer 8016B-TF is a 
1 U rackmount server that offers the Intel Xeon proces- 
sor 7500 Series and an Intel 82576 dual-port Gigabit 
Ethernet controller. Based on the Supermicro Super 
X8QBE-F server board, the 8016B-TF boasts up to 
256GB of memory and has three hot-swap drive bays 
(3x SAS/SATA drive support). The 8016B-TF also has 
an integrated IPMI 2.0 dedicated LAN and offers 93% 
energy efficiency. 

• Intel Xeon processor with QPI up to 6.4GT/S 

• Up to 256GB DDR3 1066/978/800MHz ECC 
registered DIMM 

• 1 x16 PCI-E 2.0 slot 

• LSI 2108 8-port 6Gbps SAS controller; RAID 0, 1 , 5 

• 1 400W Gold-level high-efficiency power supply 

Best For: Enterprise mission-critical applications, HPC 
cluster nodes, data centers, and data farms. 
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A+ Server 1 01 2G-MTF 




Based on the single AMD Opteron 6100 Series proces- 
sors (Socket G34), the 1 2/eight-core-ready 1U rack- 
mount A+ Server 1012G-MTF utilizes the AMD chipset 
SR5650/SP5100 and the Super H8SGL-F motherboard 
to increase performance. Additionally, the 1012G-MTF 
can support up to 128GB of memory and offers two 
Intel 82574L controllers for dual-port Gigabit Ethernet 
as well as eight USB 2.0 ports and a dedicated LAN for 
system management. Four hot-swap SATA drive bays 
are also available. 

• HT3.0 link support through AMD Opteron 61 00 
Series processors 

• Up to 128GB DDR3 1333/1066/800 MHz SDRAM in 
eight DIMMs 

• One PCI-E 2.0x1 6 slot 

• 350W high-efficiency power supply 

• AMD chipset SR5650/SP51 00 

Best For: File/print server, firewall, mail server, 
SMB Web server, server appliance, or cluster node 
applications. 



A+ Server 1042G-TF 




The A+ Server 1042G-TF is a 1 2/eight-core-ready 1U 
rackmount server based on Quad/4-way AMD Opteron 
6100 Series processors and the AMD SR5670/SP5100 
chipset. With the Super H8QGi+-F integrated board, the 
1042G-TF provides up to 512GB of memory, and it 
includes one PCI-E Gen 2.0 x16 slot. Additionally, the 
1042G-TF offers a dual-port Gigabit Ethernet LAN con- 
troller with four USB 2.0 ports and one dedicated LAN 
for system management (IPMI 2.0). Three hot-swap 
SAS/SATA drive bays are also available. 

• 1 400W high-efficiency power supply 

• HT3.0 link support through AMD Opteron 6100 
Series processors 

• Up to 512GB registered ECC DDR3 1333/1066/800 
SDRAM in 32 DIMMs 

• IPMI 2.0 + KVM with dedicated LAN support 

• 17.2 X 1.7x28.2 inches (WxHxD) 

Best For: High-performance compute cluster, virtualiza- 
tion server, or online transaction processing applications. 



SuperBladeTwInBlade 




As the newest addition to Supermicro's SuperBlade 
family, the innovative TwinBlade doubles the number of 
dual-processor compute nodes per 7U enclosure to 20, 
allowing for up to 120 DP servers per 42U rack for a 
dense, cost-effective solution. Based on the SBI-7226T- 
T2 blade supporting the latest Intel Xeon 5600 Series 
processors, this system delivers unprecedented perfor- 
mance per dollar and per square foot. Available with dual 
40Gbps QDR InfiniBand switches, this blade solution 
features industry-leading 94% power supply efficiency. 

• 20 DP (Intel Westmere and AMD G34) nodes in a 
7U enclosure 

• 128GB ECC-registered DDR3 per DP node 

• Dual 40Gb InfiniBand, lOGbE, and 8Gb FCoE 
switches 

• Dual 1/1 0Gb Layer 2/3 Ethernet switches 

• Centralized remote management via IPMI 2.0 with 
KVM over IP 

Best For: High-performance computing in data center, 
enterprise, and cloud computing deployments. 



For more information on tliese and otiier Supermicro servers, go to www.supermicro.com or call (408) 503-8000. 
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Report Identifies 
Top Social Media Risks 

According to a recent report by ISACA, previ- 
ously known as the Information Systems 
Audit and Control Association, businesses 
are not immune to social media risks. The 
report, "Social Media: Business Benefits 
With Security, Governance, and Assurance 
Perspectives," identifies the top five risks for 
companies using social media: viruses and 
malware, a lack of content control, unrealistic 
customer expectations of "Internet-speed" 
service, brand hijacking, and noncompliance 
with record management regulations. 

Jeff Spivey, trustee for the IT Governance 
Institute (ISACA's research affiliate) and 
president of Security Risk Management, 
says additional risks exist within any emer- 
gent technology, and those risks need to be 
understood and quickly managed. 

"We, as a culture, will hear the word 'risk' and 
think that all risks are bad," Spivey says. "The 
companies that understand the risk and then 
best manage those risks provide their compa- 
ny with a competitive advantage." 

Impact At & Away From Work 

ISACA's report not only addresses the risks 
of social media use in the workplace but also 
analyzes the impact of use outside of work. 
As a result, the report recognizes the effects 
of such risks, such as corporate reputation 
damage, a decrease in productivity, or a loss 
of competitive advantage, and provides tangi- 
ble solutions to accompany each threat. 

To counteract the risks, ISACA suggests 
businesses should consider content filtering 
for company computers and mobile devices 
to restrict or limit access to social media sites 
at the workplace. Other suggestions include 
daily antivirus and anti-malware updates, 
training for risk awareness, clear policies 
for office workers, and a sufficiently sized 
staff to handle the traffic a social media 
presence generates. 

The report explains that employees may be 
using these sites without understanding all of 
the threats, so education about risks, proper 
use, and company policies can also help 
develop safe practices. 

Though the risks may make companies hesi- 
tant about social media use, ISACA reports 
that complete elimination may not be the best 
option, as these sites can be valuable in im- 
proving brand recognition and monitoring 
both competition and customers. 

And, as Spivey points out, social media use 
isn't going to disappear anytime soon. "It's 
getting larger . . . and it's not something that's 
going to go away," he says. "The risk of not 
being involved in it and understanding it is 
much greater than the risk of ignoring it. It's 
important that each company understands 
what opportunity this now provides and how 
to best manage that opportunity." 

by Amanda Bouc 
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On A Mission 
To Create A 
Paperless Office 

Cabinet NG Keeps Insurance Company On Track 



by Julie Sartain 
• • • 

For more than a decade, businesses 
nationwide have discussed reducing their 
carbon footprints by implementing a 
paperless office. Yet, according to envi- 
ronmental organizations, Americans still 
use more than 50 million tons of paper 
each year, and global consumption is 
about 400 million tons a year. 

Maya Assurance, headquartered in Long 
Island City, N.Y., needed to launch a 
paperless office as soon as possible. 
Cabinet NG (www.cabinetng.com) had the 
products to make it happen. 

The Challenges 

"For our particular scenario — a small 
and growing company — our most pressing 
problem was storage," says KJ Singh, vice 
president at Maya. "We had originally 
reserved 20% of our office space for files 
but quickly realized that we would need a 
lot more than that. The additional shelves 
and filing cabinets needed to keep pace 
with our growing business would have 
required us to move to a larger office 
space very soon. For a new company, a 
premature investment in a larger office 
would have slowed our growth." 

Maya considered developing custom 
software programmed from scratch. "We 
also looked at additional off-the-shelf soft- 
ware products," says Singh, "but the initial 
costs were prohibitive. Plus, the other 
products still would have required consid- 
erable customizations to fit our needs." 

Singh says that after comparing multiple 
products, Maya's team selected CNG- 
SAFE (Shared Access Filing Environ- 
ment) for multiple reasons. First, it was 
easy to customize the application without 
major development. Maya Assurance did 
not have to hire a dedicated programmer 
to make the product fit its needs. Second, 
the core platform was stable and flexible 
enough such that the company did not 
have to invest much time or money in 
starting up. 

And third, CNG-SAFE allowed Maya to 
use its built-in management console to 
create user accounts, assign security 
rights, and develop an e-filing infrastruc- 
ture to fit Maya's needs. "With our experi- 
ence with IT, CNG's setup was extremely 
user-friendly," says Singh. "There was 
minimal training required for the support 
staff to implement CNG-SAFE." 

Another plus, adds Singh, is that 
because each department has its own 
requirements, CNG-SAFE allowed the 
company to design the e-cabinets accord- 
ingly. There was no one-size-must- fit- all 
with the software. "Once each depart- 
ment defined its needs, with minimal 
setup time, we were able to implement 
CNG-SAFE." 

Insurance companies have many regula- 
tory requirements, such as document 
retention, which dictates that documents 



must be retained for six years. Thus, sim- 
ple document archiving was Maya's origi- 
nal reason for purchasing CNG-SAFE. 

"Our next goal," Singh adds, "was to 
incorporate these new technologies (such 
as CNG, for example) into our business 
operations and save the company consid- 
erable expenses. Once files were scanned, 
the plan was to use offsite storage, thus 
recovering office space." 

Implementation, Installation & Training 

Singh notes that the implementation 
went well and without any problems. "We 
did a staged rollout to get over the learn- 
ing curve and resolve any glitches first," 
he says. "Once the support team was com- 
fortable with the product, we knew the 
implementation would go better." 

The product itself is actually very intu- 
itive and the learning curve was minimal, 
he adds, because of the Maya team's expe- 
rience in IT and its employees who 
embraced the new technology. Thus, 
rolling out the software only required brief 
demonstration with the existing employ- 
ees, and they had minimal delays because 
of training. "We did not reinvent the 
wheel with CNG-SAFE. It complemented 
our needs without any disruption, and we 
were able to design our paperless work- 
flow exactly how we processed our paper 
workflow," says Singh. 

"When we first started using CNG- 
SAFE," Singh says, "we were a small 
company and only in business for about a 
year. In an effort to save costs, our initial 
configuration was to use existing server 
hardware (which was a single server sup- 
porting the entire company). When we 
made the decision to go live, we purchased 
a dedicated server to host CNG-SAFE. In 
anticipation of future growth, we invested 
in a dual-processor server and a standard 
RAID array with sufficient disk space." 

During the pilot testing, Maya's team 
was using the software to get more famil- 
iar with it. They were setting up the cabi- 
nets and users, and testing the security 
rights within CNG. "We were getting 
familiar with the scanners, supporting 
hardware, and settings," Singh adds. 

But not knowing all the product's fea- 
tures, the company had planned to start the 
document archiving and then look into 



Cabinet NG CNG-SAFE 



Transfornns nnanual paper-based processes 
into efficient electronic workflows. 

"We did not reinvent the wheel with CNG- 
SAFE. It complemented our needs without 
any disruption, and we were able to design 
our paperless workflow exactly how we 
processed our paper workflow," says KJ 
Singh, vice president at Maya Assurance. 

(800) 621-6501 lwww.cabinetng.com 



additional "paperless" software for its 
daily operations. "After we became more 
familiar with the basics of CNG-SAFE, 
we discovered its additional features, 
which would allow us to process an entire 
paperless workflow in addition to docu- 
ment archiving," Singh says. 

Singh also notes that during the pilot 
period, as users were adjusting to the scan- 
ners, resolution, and DPI settings, Singh 
secured a baseline for Maya's storage 
requirements. And, depending on future 
storage requirements, NAS devices can be 
implemented if necessary. 

"Also, the migration from the single 
server to a dedicated server was done easi- 
ly with help from CNG tech support," says 
Singh. "With no downtime, the software 
was easily reinstalled on the new server, 
including the database. The local client- 
side software did not have to be rein- 
stalled. We only had to change the IP 
number of the desktops to point to the new 
server, and we were up and running." 

Big Plus, Big Savings 

According to Singh, after installing and 
using the CNG-SAFE product, Maya 
saved about $100,000 a year in conserved 
and recovered office space; $135,000 a 
year in decreased support staff, senior 
examiners, and underwriters; and about 
$90,000 in paper, shelves, and supplies 
that were previously required to maintain 
thousands of paper files. 
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Document Management Software 
Efficient | Secure | Affordable 

"The file archiving is reliable and meets 
the regulatory requirements," Singh says. 
"We can increase the case load per person 
without increasing stress, and the in- 
creased efficiency searching for files and 
documents is phenomenal. It was a small 
investment in our IT infrastructure that 
had far greater ROI than anticipated." 

As for the future, "We are committed to 
a paperless environment, and future plans 
will include CNG-SAFE in our business 
expansion plans, marketing, and IT opera- 
tions," Singh says. "We are leveraging 
our paperless environment with our busi- 
ness partners, investors, and recruiting of 
new employees. It has definitely set us 
apart with the industry as a leader in inte- 
grating technology." 

James True, vice president of business 
development at Cabinet NG, says the com- 
pany has been part of many industry firsts. 
"We were the first to bundle workflow and 
access rights in the core product," he says, 
"and the first to offer integrated document 
management for QuickBooks. We have a 
patent-pending technology for integration 
with Windows Apps, a diversified customer 
base across most industries, and multiple 
configurations including CNG-SAFE for 
client/server; CNG-Online for hosted/SaaS; 
and CNG- Web for browser access." 

Future plans include expanding the capa- 
bilities that support new online and mobile 
trends, says Abe Niedzwiecki, vice presi- 
dent of technology at Cabinet NG. "In 
addition, we plan to increase the number of 
integrations with SMB applications and 
grow the value-added reseller (VAR), 
independent software vendor (ISV), and 
original equipment manufacturer (OEM) 
channels to market." 
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CLIENTS 



Applications Of 
Analytics To Business 

Transform Disparate Sources Of Unstructured Data 
Into Meaningful Information For Your Enterprise 



by Kurt Marko 
• • • 

Business intelligence isn't a new con- 
cept in IT, but it has gained visibility and 
importance as today's digitized, online 
enterprises have become inundated with 
data. BI covers a broad spectrum of capa- 
bilities and tools, ranging from simple 
spreadsheet reports or information dash- 
boards to sophisticated predictive analyti- 
cal models, but it has traditionally been 
focused on retrospective reporting using 
historical data, summarizing sales figures 



^ -Aberdeen Group's Michael Lock 

by region, product line, and month, for 
example. Yet BI is increasingly being sup- 
plemented with so-called business analyt- 
ics, which uses the same data sources, 
along with quantitative analysis, statistics, 
and predictive models, to improve busi- 
ness planning and decision-making. 

Info-Tech Research Senior Research 
Analyst Gareth Doherty says BI users 
fall along a broad spectrum of sophisti- 
cation. At the low end, he notes, virtually 
all organizations, including SMEs, have 
some form of scheduled reporting, even 
if it's just a simple spreadsheet report. 
Multidimensional models and analysis, 
such as OLAP (online analytical process- 
ing), represent the next level in usage 
evolution, while the most advanced 
enterprises are developing predictive 
analytical models (business analytics) to 
guide strategic decision-making. In this 
article, we will generally use the terms 
BI and analytics interchangeably, 
although the former usually implies ret- 
rospective reporting, while the latter con- 
cerns future planning. 

Major Applications & Uses 

In "Analytics at Work," authors Thomas 
Davenport, Jeanne Harris, and Robert 
Morison contend that most business deci- 
sions warrant some degree of analytical 
study, but in reality, some functions or 
business domains are more amenable to BI 
and analytics than others. Because devel- 
oping and implementing effective BI and 
analytical processes and tools requires 
focused, executive-level planning and, 
ultimately, sophisticated software and 
application development, most companies 
want to find the sweet spots where such 
investments of time, energy, and money 
produce the greatest benefits. 

When looking at opportune applications 
of BI and analytics, "Analytics at Work" 
notes, "Many organizations start where 



they make their money — in customer rela- 
tionships. They use analytics to segment 
their customers and identify their best 
ones. They analyze data to understand cus- 
tomer behaviors, predict their customers' 
wants and needs, and offer fitting products 
and promotions." 

According to Brad Peters, CEO of BI 
SaaS provider Birst (www.birst.com), 
"The most valuable decisions are the ones 
people usually start with, so sales analytics 
is a huge area as is any other area that's 
customer-related." 



Other common applications for business 
analytics identified by Davenport and his 
co-authors include supply chain and 
inventory management, logistics, human 
resources (particularly in hiring decisions 
and employee retention programs), 
finance, and accounting. 

Aberdeen Group Senior Research Ana- 
lyst Michael Lock agrees. "The traditional 



applications are finance, sales, and market- 
ing; these are the typical uses of BI from a 
strategic perspective," but he adds that BI is 
extending its reach. "You're also seeing 
other cases that weren't traditional usages 
of BI, like in customer service or human 
capital management." 

Aside from the use of BI tools in vari- 
ous business functions. Lock sees a 
change in how BI tools are used, expand- 
ing beyond their traditional role in strate- 
gic planning and budgeting. "You're see- 
ing [BI] used increasingly as a tactical 
tool, for day-to-day business visibility." 
Lock also says those further up the BI 
learning curve have adopted tools 
for predictive analysis and complex 
event processing. 

Implications For IT 

What does all this mean for IT? "When 
you're getting started, it's important to 
understand your needs before you even 
start looking at the technologies, and 
doing that requires little technical exper- 
tise," Lock says, adding, "Before you 
think about spending any money on a BI 
solution, you want to look at the things 
that drive your business." Only then does 
Lock see IT involvement in understand- 
ing how the solution fits into the compa- 
ny's information architecture and techni- 
cal infrastructure. He also says IT must 
ascertain how dynamic, interactive, or 
real-time the solution needs to be and 



whether it's deployed in-house, using 
I special-purpose BI application servers 
I and databases, or sourced from an exter- 
nal SaaS provider. 

Doherty says SMEs, many of which 
use Microsoft for their enterprise data- 
bases, gradually develop their analytics 
I competence by leveraging SQL Server's 
I inherent, but oft-untapped, capabilities, 
such as the Analysis, Integration, and 
Reporting services. These provide basic 
BI functions such as OLAP cubes, pre- 
dictive analysis, so-called ETL (extract, 
transform, and load) data integration, and 
a report-building environment. Although 
high-end, special-purpose BI solutions 
are also widely available, because of their 



cost and complexity, these typically 
appeal to large enterprises. 

SaaS Options 

Another analytics provisioning option is 
SaaS, with several vendors now offering 
online BI services. Birst' s Peters says, 
"SaaS is just a delivery mechanism. By 
prepackaging an entire value chain in a 
more economical way, you can open [BI] 
up to more people." 

Doherty says online BI solutions have 
several advantages, including obviating 
the need for new hardware and software 
investments, substituting large up-front 
capital expenses with usage-based opera- 
tional charges, reducing the number 
of support staff, accelerating deploy- 
ment, enabling more cost-efficient scala- 
bility, and often improving performance 
and availability. 

But, he says, SaaS doesn't eliminate 
every task required to develop and deploy 
an analytics solution. Users must still 
integrate, normalize, and "cleanse" their 
data sources and inspect the data for 
quality and accuracy. They typically must 
also migrate and load the data to the 
external provider. 

Companies seeking to get a handle on 
their many sources of financial, transac- 
tional, and customer data and use it to 
make better fact-based decisions have a 
wealth of BI and analytics options. SMEs 
can start gradually either by leveraging 
nascent, unexploited capabilities in their 
existing SQL Server databases or tapping 
one of the growing number of SaaS BI 
providers. Experts caution, though, that 
becoming an analytical company isn't pri- 
marily a technical challenge, but an orga- 
nizational, cultural, and leadership one. E9 



Top Departments Driving Tlie Need For Dl 

Although snnall connpanies lag behind their larger competitors in the adoption of BI 
solutions, they use them in the same areas, primarily customer service, sales, and 
finance, according to a survey by Aberdeen Group. 



Customer Service 



Finance: Expense 
Management 



Sales 



Finance: Billing 



Transportation / 
Shipping 



19% 




35% 



64% 



32% 



■ Large Companies 

Midmarket Companies 
^ Small Companies 
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% of Respondents 



55% 



65% 



Source: "Business Intelligence for the Small to Medium Sized Business (SMB): Analytics 
Reaches Down Market"; Aberdeen Group Research Report by Michael Lock; October 2008. 



"Before you think about spending 
any money on a BI solution, you 
want to look at the things that drive 
your business." 



Key Points 



• BI and business analytics have histori- 
cally been used to retrospectively sum- 
marize financial and sales data from 
disparate sources via regularly pub- 
lished reports or dashboards. However, 
they are increasingly being used for 
interactive, real-time reporting or predic- 
tive analysis to guide future business 
decisions. 

• Although traditionally focused on financial 
matters, other applications for analytics 
include supply chain and inventory man- 
agement, logistics, human resources, and 
customer service. 

• Special-purpose BI solutions can be 
quite complex and expensive; however, 
mainstream enterprise databases now 
include a core set of BI and analytics 
features. SMEs should also consider 
new BI SaaS solutions in which all the 
components and functionality of enter- 
prise-class BI suites are delivered as a 
subscription cloud service. 
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:iuipment Recycling & 



AnythingIT 



Rnything(^} 



With a suite of IT asset management services, including 
testing, auditing, and processing, AnythingIT can help 
you deal with your aging technology. AnythinglT's con- 
sultants will perform an IT asset review and analysis that 
uses a fair-market evaluation of your current technology. 

• Recycle Tomorrow program saves costs in the 
remarketing and recycling process 

• Can process IT assets at multiple ISO 14001 -certified 
facilities globally 

• Offers custom-designed channel and non-channel 
programs for OEMs and integrators servicing both 
government and commercial clients 

• Knowledgeable in disposal processing, data mining, 
and warehouse systems for IT assets 

• Unparalleled past performance servicing public- 
sector clients 

• Innovative trade-in and asset recovery programs 

Best For: Enterprise organizations that need help 
making cost-effective business decisions for IT storage, 
disposal, resale, donations, and recycling. 



Apto Solutions 



Solutions 



Apto Solutions can help you monetize downsized or liq- 
uidated assets, and the company can handle the sales 
process for you, including market research, valuation, 
collections, and shipment. 

• Features compliance programs for environmental, 
export, data security, and electronic tracking issues 

• Logistics management for recovery and consolidation 
to the Apto warehouse 

• Inventory Management System lets you track the 
trade process 

• Maximize return on investment through an extensive 
contact network and market knowledge 

Best For: Companies looking for a recovery service 
with experience, credentials, and expertise in technol- 
ogy remarketing. 



Classic Computer Recovery 




Classic Computer Recovery can refurbish, reuse, and 
recycle all types of electronics, including PCs, copiers, 
and televisions, because of the company's zero-waste 
policy. The inventory is evaluated through a multitest 
process for serviceability, and the company's associa- 
tions with wholesale and retail markets allow Classic 
Computer Recovery to resell the parts of units that can't 
be sold as a whole unit. 

• Equipment is refurbished with working components 

• For equipment that can't be resold, the unit is broken 
down into separate components 

• Hardware that's too old for resale is recycled for 
raw materials 

• Data is removed using the DoD's 5200.28-STD 
directive 

Best For: Enterprises that have a variety of electronics 
to remove and recycle. 



Electra Worldwide 



T Electra Worldwide 



ELECTRONICS RECYCLING SOLUTIONS 



Electra Worldwide specializes in providing safe, secure, 
and reliable electronics recycling that produces the 
greatest benefit to the environment while minimizing the 
financial impact on its customers. The company has 
developed systems and solutions that ensure peace of 
mind— it manages the entire recycling process from start 
to finish, guaranteeing that clients receive the best value 
for their equipment. 

• Specializes in sustainable recycling and refurbishing 
of electronics 

• Zero landfill goal 

• Complete turnkey solution for clients' e-waste and 
asset management needs 

• Employs the latest sanitization and destruction 
techniques 

• ISO 14001 and R2 certified 

• Proprietary tracking system ensures that clients can 
monitor the process 



Frontier Computer 



redefine IT. 



Frontier [551 



Frontier Computer has been in the business of helping 
companies plan, build, and maintain their IT infrastruc- 
tures since 1976. The company buys used computer 
equipment, excess IT hardware, and enterprise-level IT 
equipment, including servers, workstations, peripherals, 
storage arrays, and networking tools. 

• Buys excess new or used enterprise equipment 

• Offers environmentally friendly end-of-life services for 
obsolete IT assets 

• Works with Cisco, HP, IBM, and Sun hardware 

• Global presence helps Frontier respond with speed to 
customer demands 

Best For: Enterprises that want to sell their equipment to 
a company with decades of experience with IT hardware. 



Horizon Datacom 



O0 9 

O 



HORIZON 

□ DATACOM' 

yowr network, our mission 



Horizon Datacom purchases network LAN/WAN, wire- 
less, and VoIP equipment from a variety of manufactur- 
ers, including Cisco, Juniper, Nortel, Polycom, and 3Com. 



• Tests and refurbishes used equipment 

• Offers a complete buyback program to protect your 
hardware investment 

• Real-time inventory with everything shown in stock 

• Rated A+ by Better Business Bureau 

Best For: Companies getting rid of surplus networking 
and communications equipment. 



Best For: Medium-sized to large companies concerned 
about reliable, secure, and certified asset destruction 
or remarketing. 
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Processots Product Spotlight highlights options available in key data center product categories, providing product information side-by-side for easy comparison. 



Disposal Services 



Compiled by Rod Scher 



Converge 



c 



CONVERGE 



Converge focuses on data security and protecting 
clients from liability by leveraging technology, process- 
es, and customized solutions into the right mix of end- 
of-life IT asset management and disposal services. 
And with Converge's 30 years of technology remarket- 
ing experience, customers can mitigate or eliminate 
the costs associated with compliant IT asset disposal. 

• Ultimate data security protection 

• Environmentally compliant disposal 

• Comprehensive remarketing, redeployment, and 
donation strategies 

• Real-time, comprehensive reporting 

Best For: Enterprise or global organizations needing a 
secure, compliant global IT asset disposal strategy. 



Data Media Source 




DMS 



Data Media Sdurce 

www.datamediasource.com 



Data Media Source buys used tape media, including 
LTO, AIT, and SDLT, and provides free data destruction, 
taking care of all the logistic and security concerns you 
have. Sold media can be turned into cash or exchanged 
for brand-new media. 

• Provides value of the tape and details costs involved 

• Tape is shipped with complete chain-of-custody docu- 
mentation 

• Tape is inspected and sorted— you'll be notified of 
completion 

• Once inspection is complete, paperwork is processed 
for payment 

Best For: Companies in the process of removing or 
renewing their tape libraries. 



DMD Systems Recovery 




DMD Systems Recovery works hard to minimize your 
risk and maximize your payback, so you'll get a solid 
return on investment without worrying about the possi- 
bilities of regulatory fines, bad publicity, or litigation 
from data theft on hard drives that weren't properly 
sanitized. DMD Systems Recovery offers data dein- 
stallation, packaging, logistics, data destruction, recy- 
cling, and remarketing. 

• Removal and packaging services to preserve value 

• Increased ROI through direct purchase or profit 
sharing 

• DoD 5220.22-M-compliant data wipe and NAID- 
compliant destruction 

• Reduced risk through certificates of destruction and 
compliance and transfer of ownership 

Best For: Data centers, call centers, and companies 
with large centralized operations. 

Contact: (877) 777-0651 | www.dmdsystems.com 



Reclamere 




CLAMERE 

The Data Security Experts 



Reclamere's experienced team works with you to develop 
a data security plan tailored to meet your data destruc- 
tion, data recovery, and IT asset management needs. 
Reclamere's experts can also help you execute your 
legal responsibilities for each phase of the IT equipment 
life cycle, which helps protect the company, employees, 
and clients from data breaches. 

• Certified data destruction 

• IT asset management for safe and secure preparation 
of electronic equipment 

• IT audit and assessment to evaluate a company's 
risk level 

• E-discovery and litigation support to recover infor- 
mation from hard drives for legal procedures 

Best For: Enterprises most concerned about the 
security of outdated IT assets. 



Recycle Your Media 



K^ecv cleYourMedia 
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Recycle Your Media has a proprietary system for fully eras- 
ing data tape media cartridges. The process erases each 
tape from pin to hub with a magnetic degauss power that's 
10 times stronger than DoD degaussing standards. Recy- 
cle Your Media offers premium pricing paid now on the 
following media formats: DLT VS160, 3592, T10000, of T- 
10000, LTO-4, AIT-4, AIT-5, VXA X-23 tapes, all brands. 

• 1 00% full-length, pin-to-hub erasure for total security 

• Recycle Your Media pays for tapes— no more costly 
shredding services 

• Full chain of custody 

• Volume serial reports 

• Certificate of data destruction 

• Drive read/write data test and reset to blank tape, 
ready-to-write status 

• Final quality assurance scan step to confirm full 
erasure, reset, and data integrity 



Redemtech 



REDEMTECK 



Redemtech specializes in helping Global 1000 IT organi- 
zations reduce the cost and risk of technology change. 
Our ITAD (IT Asset Disposition) services recover, refur- 
bish, redeploy, resell, and recycle IT assets of every kind 
with security and transparency. 

• Red Rabbitt brand of Microsoft Authorized Refurbished 
equipment increases value recovery 

• High-security reverse logistics virtually eliminates data 
and asset security risk in-transit 

• Global e-Stewards certification ensures responsible 
management of e-waste 

• Surplus IT donation program to support low-income 
families and nonprofit organizations that lack basic 
technology 

• Integrated operations across the United States, 
Canada, Mexico, and Europe ensure uniform services 
delivery and centralized asset management 



Best For: IT staff who want a green alternative for 
recycling tape media that's out of its retention period 
and who need full data erasure and reporting on every 
tape recycled. 



Best For: Enterprises engaged in highly distributed 
asset recovery and reuse programs, large and small 
disposal projects, and high-value portfolios. 
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FEATURED COMPANY 



A Helping Hand 
For SMEs 

Acumen Solutions Offers Advice & Consulting On A Variety Of IT Topics 



Acumen Solutions 



by Holly Dolezalek 

• • • 

IT IS TOO BIG AN INVESTMENT to make 
haphazardly, and there are times when 
companies have to reach outside of their 
own expertise in order to invest wisely 
and implement those investments with 
minimal headaches. 

Acumen Solutions (www.acumensolu 
tions.com) is an IT consulting firm in 
Vienna, Va., a suburb of Washington, 
D.C. Its nearly 700 customers are primari- 
ly larger enterprises, such as the Global 
1000 and federal government agencies. 
The company has about 300 employees, 
60% of whom work at its headquarters in 
Vienna. The rest are distributed at the 
company's New York, San Francisco, Los 
Angeles, and London offices. 

The company doesn't let size stand in 
the way of opportunities, however; in 
2004, it incorporated its managed services 
division as a company called Alteritech 
(www.alteritech.com), an IT infrastruc- 
ture consulting and managed services 
firm that serves the small to medium- 
sized enterprise market. Alteritech has 
office space in Acumen's New York and 
Vienna offices. 

Giving Advice 

Acumen provides advice and vendor- 
agnostic software in four solutions cate- 
gories: Enterprise Architecture and 
Integration, Customer Relationship Man- 
agement, Enterprise Transformation, and 
Information Management. The first cate- 
gory. Enterprise Architecture and Inte- 
gration, involves advice for companies 



revenue, followed by Information Man- 
agement, which Prakash says is often a 
natural follower of the Customer Rela- 
tionship Management segment. "Often, 
after our customers have improved these 
CRM systems, they want to find ways to 
push that new information out to cus- 
tomers or internally for call center reps 
or others to manage or use," she says. 

Relationship Selling 

Unlike many software companies. 
Acumen's sales model is built on rela- 
tionships rather than contacts. It gets 
a lot of referrals from existing cus- 
tomers, whether from one com- 
pany to another company 
or from one depart- 
ment to another in 
a single com- 
pany. "Our 
busi- 



enterprise," Prakash explains. "Some of 
[that] software works well out of the 
box for a medium- sized company, but to 
really make it work for a large contact 
center, they have to integrate it with the 
order system, telephony, and call routing, 
which is when they typically call us in for 
integration work." 

Global & Local 

Acumen started out primarily in the 
communications and media sector, partic- 
ularly in cable, which is still its largest 

vertical. But 
the 
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ness IS 

relationship-based, because you don't 
invite an outside company to define your 
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"We just serve our clients where and 
when they need it, and where they're 
based tends to be irrelevant." 



- Acumen's Donita Prakash 



that want to improve their existing or 
optimize their new IT infrastructure, inte- 
grate corporate systems, or migrate func- 
tions to the cloud. The second. Customer 
Relationship Management, includes IT for 
call center effectiveness and the manage- 
ment of customer and enterprise relation- 
ship management, such as systems for 
sales, marketing, and customer service. 

"The Enterprise Architecture and Inte- 
gration and the Customer Relationship 
Management segments are our largest 
ones, and they're about equal in terms of 
revenue," says Donita Prakash, chief mar- 
keting officer for Acumen. 

The Enterprise Transformation seg- 
ment involves helping clients develop 
strategies for business processes, includ- 
ing roadmaps for improved IT strategy 
or process or program improvement. 
It brings in the third largest amount of 



own business or strategy unless you trust 
them," Prakash says. 

Referrals from one department to 
another are quite common. "We might 
help a company with a CRM system for 
its contact center and then be referred to 
their data warehousing because they need 
help in re-architecting the data to make it 
more efficient," Prakash says. "Then we 
might move on to billing because they 
want to produce invoices faster." 

Acumen also has software partners that 
it co-markets with, such as Google Enter- 
prise, Salesforce.com, or Amazon Web 
Services. Because the company is vendor- 
agnostic, it doesn't have special reseller 
agreements with those companies, but it 
does get business that way. "As those 
providers are selling in an industry, com- 
panies sometimes need an expert integra- 
tor to help make it really work for that 



company is 
getting more 
and more work in 
the public sector and 
with health care, as well. It 
also does a lot of work with con- 
sumer and commercial products and with 
financial services. "We try to hire people 
from those industries, so we understand 
those segments very well," Prakash says. 

Acumen doesn't break its business out 
by region because so many of its cus- 
tomers are global, but the company says 
that Europe, the Middle East, and Africa 
are some of its growth areas, at least in 
that its customers are either building or 
expanding operations there. "We just 
serve our clients where and when they 
need it, and where they're based tends to 
be irrelevant," Prakash explains. 

The company's annual sales are about 
$50 million, but Prakash says it may be 
closer to more than $60 million by the 
end of the year. 



(703) 600-4000 
www.acumensolutions.com 

• Acunnen Solutions offers consulting 
services for a broad range of custonners, 
fronn snnall and nnidsized connpanies up 
to Global 1000 enterprises. 

• The connpany is currently working on 
developing its cloud computing knowl- 
edge in an effort to better advise those 
looking to move to the cloud. 

• "Our business is relationship-based, 
because you don't invite an outside 
company to define your own business or 
strategy unless you trust them," says 
Donita Prakash, chief marketing officer 
for Acumen. 



Growing In The Cloud 

Acumen is also seeing growth in its 
Enterprise Transformation segment 
because companies are showing an 
increased interest in business systems 
that provide intelligence for better busi- 
ness decisions. "We think we'll see 
growth for the next couple of years in 
cable, the public sector, and health care," 
Prakash says. 

The company is focusing more on 
cloud computing, though, because more 
and more of its customers are interested 
in strategy and implementation in the 
cloud. The economy has encouraged 
many companies to investigate more 
efficient or cost-saving ways to invest in 
IT, which has made the cloud more 
attractive to some. This is particularly 
true of the federal government, Prakash 
says, because the Office of Management 
and Budget and the CTO and CIO of 
the federal government are sending the 
message regularly to agencies that 
they should evaluate the cloud as part of 
their infrastructures. "Obviously, the 
message is that the cloud can deliver 
some cost benefit for the taxpayer, so 
agencies are being encouraged to evalu- 
ate it," Prakash says. 

The government has actually been 
swifter to adopt cloud-based solutions than 
the private sector, in some cases, Prakash 
says. Acumen's largest customer is the 
U.S. Census, which uses a cloud-based 
platform to manage the partner networks it 
uses to make sure the census is successful. 

The private sector has shown interest 
in the cloud, as well, so Acumen has 
focused on (and become better known 
for) helping clients make decisions about 
what should move to the cloud and what 
shouldn't, taking into account all the con- 
cerns that pertain to that choice, such as 
security, data architecting, disaster recov- 
ery, and other issues. J 



Acumen's Areas Of Expertise 

Acumen Solutions' consulting services include four main solution categories: 

1. Customer Relationship l\/lanagement: Focuses on contact center effectiveness, customer 
insight, enterprise relationship management, and sales automation. 

2. Enterprise Architecture & Integration: Focuses on cloud interoperability, enterprise 
architecture, system integration, and vulnerability and performance testing. 

3. Enterprise Transformation: Focuses on IT strategy and innovation, process improvement, 
and program management. 

4. Information Management: Focuses on business intelligence and reporting, data warehousing, 
and knowledge management. 
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The Move To 
Virtualization 

How Can It Affect Your Enterprise & IT Staff? 



by Jean Thilmany 
• • • 

Many small to medium- sized enterpris- 
es are turning to virtualization for some or 
all of their applications. 

Virtualization basically separates the 
software environment from the underlying 
hardware, explains Chris Webber, who 
describes himself as the current virtual- 
ization guru at network security and man- 
agement provider Blue Coat Systems 
(www.bluecoat.com). 

But before investing in the technology, 
IT managers still need to thoroughly 
investigate virtualization, with an eye 
toward its impact on the enterprise, adds 
Steve Lesem, CEO at cloud storage 
provider Mezeo Software (www.mezeo 



they can expect to consolidate server 
space by anywhere from one-tenth to one- 
half, Webber says. 

Cost Savings 

The consolidation adds up to important 
cost savings, too, because the machines 
will take up less space, which makes for 
less money spent on fees for space and for 
cooling costs. Many managers fail to factor 
cooling savings into the virtualization 
equation, Webber explains. 

He stresses that over the past five years, 
makers of virtualization software have 
upgraded their hypervisors to the point that 
IT managers no longer need a great deal 
of expertise in installing virtualization 
software. The hypervisor, or virtualization 



Key Points 



• Follow best practices when initially imple- 
menting a virtual environment. 

• First determine which application(s) to vir- 
tualize; you might choose to make them 
all virtual. 

• When planning your initial environment, 
consider how your systems will grow 
and your virtual environment will change 
over time. 



Many virtual servers now include man- 
agement tools that help cut ramp-up time, 
she adds. 

Still, IT staffers who are building a 
virtual environment from scratch should 
follow best practices in server manage- 
ment and configuration. "This will 
help them down the road, when they have 



to add servers or when they have to do 
the backup," Budko says. "It's consider- 
ably harder to implement advanced fea- 
tures later on if you haven't designed it 
right the first time." 

If your IT staff hasn't implemented the 
separation of duties feature, for example, 
it won't be able to virtualize the human 
resources database down the road. That's 
because the separation feature partitions 
the infrastructure where sensitive data 
lives. "You have to design separate clus- 
ters within the virtual infrastructure from 
the start; that way you can virtualize 
everything," Budko explains. 

Once designed and implemented, your 
IT staff will find that server management 
and backups are easier in a virtual envi- 
ronment. This is in part because virtualiza- 
tion allows for a common management 
platform across all hardware and applica- 
tions, Webber explains. 

"You're not married to a certain piece 
of hardware or operating system," he 
says. "You have ease of management 
because once you know how to do some- 
thing for one thing you know how to do it 
for everything. 

"In my organization, we had the Win- 
dows side of the house and the not Win- 
dows side, and all of the sudden, when we 
virtualized things, we realized we didn't 
need to be tied to an operating system 
quite so closely. Regardless of the operat- 
ing system we used, the underlying tech- 
nology was the same," Webber says. 

It's that kind of ease-of-use — combined 
with cost savings — that have more and 
more IT managers investigating virtual 
technology for their enterprises. 



"Virtualization can give a 
better utilization of resources, 
but you will have to decide 
which aspects of the company 
to virtualize first." 

- Mezeo Software's Steve Lesem 



.com). For instance, Lesem explains that 
while many current servers have a utiliza- 
tion rate of 10%, virtualization of servers 
can significantly increase that rate while 
driving down usage costs. 

"Virtualization can give a better utiliza- 
tion of resources, but you will have to 
decide which aspects of the company to 
virtualize first," Lesem explains. Enter- 
prises just setting up shop may decide to 
install virtual servers for all enterprise 
applications from the get-go, he adds. 

When managers move applications from 
individual hardware to shared hardware. 



Up-Front Expense 

So how will an enterprise's employees fare 
when the data center moves to the virtual 
world? According to Blue Coat Systems' 
(www.bluecoat.com) Chris Webber, they 
won't notice any differences. In fact, he 
says they may notice more uptime because 
software won't get hung up when it runs out 
of storage space on the server. 

If s the chief financial officers to whom IT 
managers will need to sell virtualization. 
Thaf s because an enterprise will need to 
pony up money for the initial hardware outlay. 

"But that hardware cost is easily recouped, 
because you'll be paying less for cooling, 
power, and space," Webber says. 



manager, is a program that allows different 
operating systems to run in isolation from 
one another, even though each of these sys- 
tems uses computing power and storage 
space on the same computer. 

Five years ago, when Webber was inves- 
tigating with the server team, he said there 
was much more to consider because, at that 
time, hypervisors were limited. 

"We'd have to track memory and hard 
disk over time and do a lot of math. We'd 
have to think about, for example, how 
much CPU the mail server would need 
when no one was checking mail at night vs. 
in the morning when everyone is using 
email," he explains. "But now the hypervi- 
sors are so good, they'll notice something 
is spiking up, so I'll give it more CPU, and 
other things are sitting idle, so they'll ratch- 
et them back a little," he adds. 

Especially For SMBs 

Although the learning curve is much 
lower for IT staffers today than in the 
past, they'll still benefit by spending time 
determining how to best design the vir- 
tual environment before implementation, 
says Renata Budko, co-founder of Hy- 
Trust (www.hytrust.com), which provides 
a solution to help IT administrators with 
their virtualization environments. 

"For the SMB, a challenge can be how 
to acquire the expertise to configure this in 
the first place, because IT is pressed for 
time and [has] to wear so many different 
hats," Budko explains. 



What are 

PROCESSOR & 

PROCESSOR .COM" 

all about? 



^^a, easy-to-read vnfot«v^^^°^ 



0.*^*^ . ^ and tips to help you do your job 

peases from new cquip,„ent manufacturers and resellers yOU Call m 

'■^"pe.t used and refurbished equj,^ 

ff^^,,.,„.s,™p..,o.e,, ^"'P^ent dealers 
^e..^«*at can service "^'^^^ 



PROCESSOR. 

It's all about products, news, and 
information data center professionals can trust. 




Page 44 



Processor.com 



July 16, 2010 



News 



DATA CENTER MANAGEMENT 



I Twitter Settles With FTC 
Over Privacy Concerns 

Social networking hub Twitter has recently 
settled a complaint filed by the Federal Trade 
Commission involving privacy policies that 
the FTC considers weak. The complaint 
stems from a series of events involving hack- 
ers gaining access to the private accounts of 
users and sending fake tweets. The FTC 
said that Twitter needs to eliminate storing 
passwords while also highlighting the impor- 
tance of complicated administrative pass- 
words. Twitter has decided to take advice 
from the FTC and the public in order to 
increase the effectiveness of its security 
and privacy measures. 

I Palm Shareholders 
Approve Acquisition By HP 

Palm shareholders have given their nod of 
approval for HP's acquisition of Palm, accord- 
ing to an SEC filing presented June 25. Both 
companies' boards of directors previously 
approved the proposed $1 .2 billion acquisi- 
tion, which was announced in April. The 
beleaguered smartphone maker has fallen 
behind Apple, RIM, and Google in the mobile 
space in recent years, but at one time it 
owned more than 70% of the handheld mar- 
ket. Most recently. Palm released the WebOS 
operating system, on which the Palm Pre 
smartphone is based. HP has stated it plans 
to use WebOS in tablets, smartphones, and 
Web-connected PCs. 

I Apple 
iPhone 4 
Sales 
Through 
The Roof 

More than 
1 .7 million: 
That's how 
many iPhone 
4 models 
Apple says it 
sold in just the first 

three days after the smartphone's June 24 
release, marking what Apple CEO Steve 
Jobs says is the most successful product 
launch in the company's history. By compari- 
son, the original iPhone took more than two 
months to reach the 1 million sales mark. The 
smartphone was first made available in the 
United States, the United Kingdom, France, 
and Germany, and the company says it will 
be available in 1 8 countries by July's end. 
Apple took 600,000 preorders for the iPhone 
4, the most ever for an Apple release. 

I Network Security Threats On The Rise 

A recent netForensics study points out that 
most IT managers expect a threat increase 
over the next two years but also indicates 
that the industry is neither budgeting nor 
recruiting enough to counter the threats. 
About 80% of the 100 IT managers sur- 
veyed expect network threats to increase 
through 201 1 , but some 78% of those sur- 
veyed indicate that IT staff sizes have either 
remained static or declined over the past 
year. Analysts at netForensics advise orga- 
nizations to examine scalable, affordable 
tools, possibly via a SaaS model, to help 
combat the threats. 

I Salesforce.com Sues Microsoft 

Salesforce.com, a cloud-based software 
company, has sued Microsoft, alleging that 
the software giant infringed on a number of 
Salesforce.com's patents and intellectual 
property. Bolstering Salesforce.com's legal 
team is David Boies, who was an integral 
part in prosecuting the U.S. government's 
antitrust case against Microsoft. Earlier this 
year, Microsoft sued Salesforce.com for 
infringement of nine of its patents involving 
its CRM (customer relationship manage- 
ment) product. 




Open Source 
In The SME 

Take The Plunge Or Reconsider? 



by Chris A. MacKinnon 
• • • 

There is no doubt that open-source tech- 
nologies have gained traction in small to 
midsized enterprises, especially when IT 
budgets are tight. But as enterprises take a 
hard look at open- source technologies, rel- 
evant issues must be considered before 



Key Points 



The price of many open-source solutions 
(free) is attractive for small to midsized 
enterprises. But keep in mind that "free" 
doesn't mean migrating to open source 
comes without a price. 
The goal of an open-source SME de- 
ployment is typically to reduce costs. 
This can be achieved with a mixture of 
reduced hardware requirements, lower 
software costs, improved security, and 
higher performance. 

One potential concern with open source 
is making sure your solution 
has solid interoperability with exist- 
ing infrastructure. 



taking the plunge. Can open source really 
benefit the enterprise? What areas offer 
the most potential for SMEs? What are the 
potential concerns? 

Traction Benefits 

According to Michael Harvey, COO and 
managing director of consulting at Corra- 
Tech (www.corratech.com), one of the 
most exciting developments of the last 
five years has been the emergence of com- 
mercial open-source applications in vir- 
tually every space — CRM, ecommerce, 
social collaboration, content management, 
ERP — that can compete head-to-head with 
traditional proprietary software. 

Harvey says many organizations already 
have open-source technologies in-house: 
servers running Linux, MySQL databases, 
applications, and so on. "In many cases," 
he says, "if they are large enough to have 
dedicated IT staff, it is often the IT folks 
driving organizations towards greater use 
of open source. Clearly, the days of the 
open source 'wild west' are essentially 
behind us." 

Peter Maclntyre, president of Paladin 
Business Solutions (www.paladin-bs.com) 
and author of the recently published 
"PHP: The Good Parts," says SMEs can 
definitely benefit from open- source tech- 
nologies. Maclntyre comments, "Can they 
benefit? Absolutely. Consider the price of 
most open-source solutions — free! The 
enterprise must consider the costs of buy- 
ing into the sole-source paradigm: the 
operating system, the database, and the 
development environment (all are costly)." 
He says open source also tends to be more 
reliable because it is supported by hun- 
dreds of programmers around the world. 
"It is better-tested and more quickly 
patched as a result," Maclntyre says. 



Enterprise Potential 

Open-source solutions have reached a 
high level of sophistication, according to 
Nick Carr, marketing director with Red 
Hat (www.redhat.com). Because of this, 
Carr says deployment decisions focus less 
on technical capabilities than on specific 
opportunities and pressure areas in an 
organization's current IT environment. He 
elaborates, "The goal of a typical open- 
source SME deployment will be to reduce 
costs. This is achieved through a mixture 
of reduced hardware requirements, lower 
software CapEx/OpEx costs, improved 
security, and higher performance. A com- 
mon starting point for open source in SME 
environments is in the network and Web 
server infrastructure, but this rapidly bal- 
loons into a wide variety of other areas, 
driven by specific IT requirements." 

Because open source is more mature 
these days, Luis Sala, senior director of 
product marketing and cloud computing 
at Alfresco Software (www.alfresco.com), 
says SMEs have a future with open 
source. Sala explains, "Many open- source 
technologies have been in existence for 
many years, and for some, over a decade. 
These technologies have proven them- 
selves to be mature and very stable. As 
with any technology implementation, 
however, organizations must go through a 
thorough evaluation process. Not all open- 
source technologies are built the same. 
Look for mature technologies with a 
reasonably large community and install- 
base." Sala says organizations can re- 
duce their implementation times by 
leveraging commercially supported open- 
source solutions. 

Sanjay Aggarwal, project manager at 
OpenSource Technologies (www. open 
sourcetechnologies.com), says the open- 
source benefit that he admires the most 
is choice. Aggarwal notes, "With open- 
source technologies, you can have your 
application developed by one vendor and 
then get the same application maintained 
or enhanced with a totally different ven- 
dor. You don't have to [stick] with one." 
He says SMEs can use open-source OSes 
(saving thousands of dollars in some 
cases) and also have their Web applica- 
tions developed at half of the cost when 
compared to traditional methods. 

Potential Concerns 

In Harvey's opinion, most industry 
experts are aware of the tremendous 



strides taken by open- source software in 
the last five to six years. He says they are 
comfortable with licensing provisions and 
commercial business models on the ven- 
dor's part. However, he says SME busi- 
ness owners and decision makers typically 
have less exposure to the rapid pace of 
innovation in open-source software. He 
comments, "Their concerns are, therefore, 
similar to themes that have been present 
for many years. Notable among them: 
Who will support the application? Won't I 
run afoul of 'strange' licensing provi- 
sions? What do you mean I have to pay — I 
thought it was free." 

Sala says organizations sometimes fall 
into a trap based on the mistaken belief 
that open source is free (zero-cost). "Like 
any IT project," Sala says, "there are 
going to be costs involved, starting with 
support contracts (if desired), consulting 
or internal development and integration 
efforts, and ongoing upkeep of the running 
environment." He says this is no different 
from more traditional proprietary technol- 
ogy implementations. Sala adds that total 
project costs will still be dramatically 
lower, but not zero. He says care must 
therefore be taken when defining budgets 
and implementation time frames. 

According to Carr, potential concerns 
will lie in ensuring interoperability with — 
and continued smooth operation of — the 
existing infrastructure. He explains, "Typ- 
ically, customers do not embark on a rip- 
and-replace strategy; rather they make a 
decision to use open-source solutions for 

"Many 
open-source 
technologies have 
been in existence 
for many years, 
and for some, 
over a decade." 

- Alfresco Software's Luis Sala 



new deployments while leaving the exist- 
ing systems in place. IT staff used to 
Microsoft environments are likely to need 
appropriate training, while Unix staff will 
transition to Linux easily. In times past, 
some customers were concerned about 
viability of the open- source supply chain 
and vendors and potential legal exposure, 
but these concerns have been thoroughly 
eliminated today." 

The biggest concern, in Aggarwal' s 
opinion, is security. "Application code is 
usually available for public use. But hack- 
ers study the code and try to hack the 
sites," he says. "The good news is, howev- 
er, this issue can be resolved by taking the 
proper steps to upgrade applications and 
have timely security reviews." i 



Potential For Commercial Use 

We are still only touching the tip of the iceberg regarding the potential of commercial open-source 
software, according to Michael Harvey, COO and managing director of consulting at CorraTech 
(www.corratech.com). He explains, "Firms of every type and every size are getting serious about 
open-source software. Many incumbent systems are reaching the end of their natural service 
lives, and businesses are looking at significant 'forklift' upgrades. For many businesses, the bene- 
fits of making the jump to open-source systems is not only cost-effective, but puts them on a path 
to greater flexibility in the future as innovation occurs." 
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Virtual Private Clouds 

Extend Enterprise Data Centers Into The Cloud 



by Kurt Marko 
• • • 

The idea of a computing utility — a vast, 
ubiquitous grid easily tapped for processing 
power and storage as needed — isn't new, 
but is finally coming to fruition in the form 
of cloud services. With the Internet's back- 
bone capacity exponentially increasing, 
online behemoths building industrial-scale 
data centers, and SaaS apps proliferating, 
the notion of metered, on-demand applica- 
tions doesn't seem so futuristic. 

Yet unlike electric utilities, which just 
deliver energy, clouds don't just serve up 
CPU cycles, they're information utilities 
over which an enterprise's most valuable 
assets are transmitted, processed, and 
stored. This gives many IT leaders pause, 
questioning the wisdom of entrusting a 

VPC Usage Scenarios 

There are several uses for virtual private 
cloud technology, including: 

Stretching business services across a 
hybrid cloud scenario. You nnay want to take 
advantage of cloud-connputing platfornns for 
Sonne elennents of a service-oriented architec- 
ture-based business service, but you want 
other elennents to rennain within your walls. 

Cloud bursting to address peak traffic peri- 
ods. Hosting a persistent service on a pay- 
per-use platfornn may not be economical. VPCs 
let you spread load balancing and a common 
address pool across infrastructures so you 
can instantiate VMs in the cloud as needed. 

Turning on multicast protocols. Some pub- 
lic clouds don't allow multicast communica- 
tions. But some apps require these protocols 
to function. A VPC network enables the use of 
these protocols across deployment environ- 
ments or within a single cloud deployment 
without unleashing a multicast storm. 

You want to monitor your cloud deploy- 
ments like any other data center resource. 

Virtual private clouds let you set up overlay 
networks for specific scenarios such as con- 
nections back to the network operations cen- 
ter or a remote service provider. 

Source: "Which Cloud Computing Is Right For You?"; 
Forrester Research Report by James Staten; April 2009. 



company's most sensitive data and essen- 
tial business processes to the vagaries of the 
Internet and vicissitudes of cloud providers. 
Although many of these issues are exagger- 
ated, there remain valid questions about the 
security and isolation of shared systems in a 
multitenant public cloud. Network security 
is of particular concern because heretofore, 
using the cloud meant using the public 
Internet to access vast server farms, where 
the network topology and segmentation is 
often undocumented and intentionally 
opaque. This is the problem VPCs (virtual 
private clouds) are meant to solve. 

Key Technology Elements Of VPCs 

From a network standpoint, using tradi- 
tional cloud infrastructure services (laaS) is 
much like browsing the Web — users bundle 
up some data and ship it over the Internet 
where some servers do their number 
crunching and return a result. This is prob- 
lematic for a couple reasons. First, the 
Internet data transport is usually unencrypt- 
ed. (The only way to guarantee data security 
is to incorporate encryption into the actual 
application.) Second, the cloud servers look 
like remote systems on a foreign network, 
not local machines on the enterprise LAN — 
a potential hurdle for apps designed for 
client-server LAN communication. 

VPCs solve both of these problems by 
establishing a secure virtual network 
between the enterprise intranet and the 
cloud provider. Most implementations use 
an IPSec VPN and tunnel private VLANs 
over the link, although some vendors use 
proprietary software and virtual appliances 
to build encrypted tunnels — a technical dis- 
tinction is largely irrelevant to most users. 

Aside from increased network security 
and transparency, VPCs have several other 
benefits. According to Forrester Research 
Principal Analyst James Staten, they offer 
greater control over the network configu- 
ration between an enterprise intranet and 
the cloud provider, including allowing 
users to define and control the address 
space, network topology, security policy, 
and access and protocol controls. 

Cloud Models 

VPCs add a fourth deployment model to 
the existing set of cloud options: public, 
hosted, and internal (or private). Public 
clouds represent the most common scenario 



Key Points 



• VPCs (virtual private clouds) couple tradi- 
tional multitenant public cloud services with 
secure, private networks, enabling tighter, 
more transparent coupling between enter- 
prise data centers and the cloud provider. 

• VPCs allow creation of hybrid computing 
environments in which some infrastructure 
and applications reside internally and oth- 
ers are hosted in the cloud, but all appear 
to be part of the enterprise intranet. 

• This hybrid cloud model is appropriate for 
enterprises that don't want to (or can't) 
move entire apps to the cloud or those 
needing temporary increases in capacity to 
meet peak loads (cloud bursting). 



and are what most people think of when they 
hear the term cloud. These use multitenant 
virtual servers on shared infrastructure with 
a common network security model, limited 
choice of OS and version, and little or no 
network configuration customization. 

Hosted or dedicated clouds are like their 
public brethren, except that servers aren't 
shared — each customer's VMs run on dedi- 
cated hardware — and can be custom-con- 
figured; however, the network is still public 
and shared. Private or internal clouds are 
really nothing more than IT-owned and 
operated virtual server farms with more 
user-friendly provisioning and usage-based 
billing. Finally, VPCs are public clouds 
augmented with private networks, using 
VPNs and VLANs to extend a company's 
intranet into the cloud data center. 

From a technological standpoint, Glenn 
Weinstein, CTO and co-founder of Appirio 
(www.appirio.com) says the secure VPN is 
a VPCs defining characteristic. However, 
from a strategic point of view, he adds, "we 
don't see VPCs so much as an extension to 
the public cloud as an extension of the data 
center. If you're not ready to pick up and 
move wholesale to a cloud application plat- 
form . . . instead of adding 10 servers inside 
your own data center, you extend the 
boundary inside of [a cloud provider's]." 

Usage Scenarios 

As Weinstein suggests, VPCs appeal 
to established enterprises with existing 
data centers and infrastructure, not small 



startups seeking to minimize their IT 
investments. Thus, most usage scenarios 
center on moving or expanding existing 
applications onto a cloud service. 

According to Sundar Raghavan, chief 
product and marketing officer at Skytap 
(www.skytap.com), VPCs are attractive for 
provisioning short-term application devel- 
opment and test environments, pilot testing 
and migrating new versions of large enter- 
prise applications such as ERP systems, 
and deploying new systems for training or 
sales demos. Forrester's Staten sees four 
primary VPC use cases: stretching or bridg- 
ing a business service or custom application 
between the public cloud and internal infra- 
structure; quickly adding capacity to an 
internal application during periods of peak 
loads (so-called cloud bursting); enabling 
multicast network applications (such as 
streaming media, teleconferencing, or 
caching servers) to be hosted on a public 
cloud; and allowing resources hosted in 
public clouds to be centrally monitored 
from the existing enterprise network and 
server monitoring environment. 

Do You Need It? 

The cloud has garnered huge mindshare 
largely because, as Staten points out, it 
embodies a highly efficient and scalable 
maturation of server virtualization. How- 
ever, he contends that the multitenant public 
deployment model is a mismatch for many 
enterprise applications, types of data, and 
business cases. "There are many applica- 
tions that require the close coupling of 
resources that can only be fulfilled from 
within a single scale-up system. Others 
require super-low latencies between compo- 
nents and are a best fit for an InfiniBand- 
based architecture. Still others, such as 
relational database clusters, are best de- 
ployed outside of cloud designs today." 

Reuven Cohen, founder and CTO of cloud 
developer Enomaly (www.enomaly.com), 
cautions that although VPCs are usually 
based on standard network protocols, there's 
little else standard about the early implemen- 
tations. He advises potential buyers to inves- 
tigate each provider's hosting and network 
infrastructure and determine whether the 
provider's reliability, geographic diversity, 
network throughput, latency, and service 
usability meet their requirements. 

Rather than viewing the cloud as an all- 
or-nothing embrace of public, shared infra- 
structure, Staten recommends thinking of it 
as a portfolio of deployment options using 
all four models. He advises enterprises start- 
ing to use public clouds to talk with their 
service providers and understand the full 
range of services, their technology and ser- 
vice road map, and their VPC plans. 
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Physical Infrastructure 



BayTech was founded in 1976 and, since the 1990s, has 
developed unique products for remote power management. 
The company uses printed circuit board instead of wires for a 
better, more resilient connection between the data center 
equipment and the receptacle. BayTech provides an exten- 
sive Web site with brochure downloads, warranty informa- 
tion, and reseller support and also offers evaluation units for 
data centers. 

Products Sold: 

• Power control, distribution, management, and metering 

• Power transfer switches 

• Console management and remote site management 



(800)523-2702 I www.baytech.net 



Physical Infrastructure 



MOVINCOOL 

THE #1 SPOT COOLING SOLUTION 



The MovinCool division of DENSO Sales California has 
pioneered the use of portable air conditioning solutions for 
a variety of North and South American markets since 1982. 
MovinCool works with a national network of distributors and 
suppliers to provide product sales, installation, and rental. 

Products Sold: 

• Office Pro Portable Air Conditioner Series for indoor 
environments such as server and telecom rooms 

• Classic & Classic Plus Portable Air Conditioner Series 
for moisture removal, outdoor and industrial spot-cooling 

• CM Series ceiling-mounted A/C for cooling server 
rooms, telecom closets, or anywhere space is limited 



(800)264-9573 I www.movincool.com 



Physical Infrastructure 




Server Technology 

Solutions for ihe Data Center Equipment Cabinet 



Server Technology is committed to the PDU market with the 
largest group of engineers dedicated to power distribution 
and other solutions within the equipment cabinet. Advance- 
ments in device power monitoring help data centers monitor 
and improve their efficiency and continuous research and 
development is fueled by companies that look to Server 
Technology for their custom cabinet power solutions. 

Products Sold: 

A complete line of cabinet PDUs, including Per Outlet 
Power Sensing (POPS), Rack Mount Fail -Safe Transfer 
Switch, Console Port access with remote power manage- 
ment. Switched, Smart, Metered, Basic, and -48 VDC 



Physical Infrastructure 



ACCESS 

COMPUTER FLOORS, LLC 

Access Computer Floors has more than 30 years of expe- 
rience in the raised floor industry. Our company strives for 
success and to exceed our clients' expectations. Our 
entire raised floor system process, including bidding, esti- 
mates, purchasing, and installation, is efficient, cost-effec- 
tive, and adaptable for any future modification. 



Services Offered: 

• Buy and sell used flooring 

• New access flooring 
and understructure 

• Perforated panels 

• Brush guards 



Grommets 
High-volume airflow 
panels 

Double cup lifters 
Trim edge 



(201)594-1292 I www.access-computer-floors.com 



Physical Infrastructure 



CYBER@SWITCHING 



® 



Cyber Switching began pioneering power distribution 
technologies in 1994. Our PDUs are used to power cycle 
and manage power to blade servers, routers, SANs, and 
other data center equipment. Our intelligent PDUs can 
monitor current individually by outlet and also provide virtual 
circuit breaker protection on an individual outlet basis. No 
other PDU on the market offers these unique features. 



Products Sold: 

• Intelligent power management 

• Value-added power management 

• Metered power distribution 

• Three-phase power distribution 



Energy management 
and control 
Switches 
Patch Panels 



311-6277 I www.cyberswitching.coni 



Physical Infrastructure 



PDUs 



direct 



Established in 2008, PDUsDirect.com is an online whole- 
saler providing a select line of PDUs for server and net- 
worked environments. PDUs Direct's basic, metered, and 
switched Rack PDUs provide local and remote power 
management, power monitoring, and environmental moni- 
toring. We pride ourselves in offering industrial-grade qual- 
ity products at the lowest prices, with the fastest shipping 
(most orders shipped within 24 hours) and simplest pur- 
chase process. 

Products Sold: 

A complete line of 20A PDUs, including metered, basic, 
and switched. 



751-7387 I pdusdirect.com 



Physical Infrastructure 



PflSIMPLEX 

' ISOLATION SYSTEMS 



Since 1979, Simplex Isolation Systems has been setting 
new design standards in modular expandable cleanroom 
components, isolation curtains, hardware, and new product 
development. Fontana, Calif., -based Simplex's unique strip 
doors and mounting systems are designed for quick instal- 
lation. Simplex parts and materials perform with optimum 
efficiency, last longer, and save you money. And with 
Simplex, you are always backed by industry expertise, 
product knowledge, and the best warranties in the market. 



Products Sold: 

• Cleanrooms 

• Enclosures 



Strip doors 
Curtains 



Physical Infrastructure 



AVTECH 



AVTECH Software, founded in 1 988, is focused on making 
the monitoring and management of systems, servers, net- 
works, and data center environments easier. AVTECH pro- 
vides powerful, easy-to-use software and hardware that 
saves organizations time and money while improving opera- 
tional efficiency and preparedness. AVTECH products use 
advanced alerting technologies to communicate critical status 
information and can perform automatic corrective actions. 

Products Sold: 

A full range of products that monitor the IT and facilities 
environment, including temperature, humidity, power, 
flood, room entry, and UPS 



(888)220-6700 I www.AVTECH.com 



Physical Infrastructure 




Based in New York City, Hergo Ergonomic Support 
Systems is an independent designer and manufacturer of 
enclosure cabinet solutions, technical computer furniture, 
and modular racking systems. The company's products 
are designed to promote organization in the workspace 
and to increase the productivity of computers, peripherals, 
and communications equipment. Hergo is known for its 
high-quality products and superior customer service. 



Products Sold: 

• Racks 

• Enclosures/cabinets 

• Motorized workstations 

• Flat-panel arms 



• Computer desks 

• Cable management 

• Power management 



222-7270 I www.hergo.com 



Physical Infrastructure 



RACKMOUNr 

SOLUTIONS, Ud 

■ where customer service matters^ 



Rackmount Solutions' mission is to listen to the IT engi- 
neer's specific needs and deliver superb-quality, high-per- 
formance products through continuous product innovation 
and operational excellence. We pride ourselves in provid- 
ing quality customer service, products that fit your IT 
requirements, and solid value for your money. 

Products Sold: 

• Wallmount and server racks and cabinets, including 
sound proof, air conditioned, and large cable bundle 

• Desktop/tabletop portable racks 

• Shockmount shipping cases 

• Bulk cable 



(866)207-6631 I www.rackmountsolutions.net 



Networking & VPN 




Nationwide Voice, Data and Vid&o 
Products and Services 



ASD's mission is to be the best nationwide provider of 
design, deployment, and project management services in 
the voice and data network integration industry. We offer 
turnkey, reliable, and cost-effective communications sys- 
tems tailored to fit the client. Our goal is to be the single 
point of contact for services to end users, systems integra- 
tors, manufacturers, building owners, and others. Our com- 
mitment includes delivering projects on time and on budget 
and offering superior, customized design. 

Products Sold: 

Voice and data network integration services, along with a 
line of networking-related products. 



(800)835-1515 I www.servertech.com 



(877) 746-7540 I www.simplexisolationsystems.com 



(800) CABLING (222-5464) I www.icat-its.com 
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Networking & VPN 



GoTo Assist 

EXPRESS 



GoToAssist® Express"^"^ lets you easily view and control 
your customer's computer online, so you quickly resolve 
their technical issues. You'll amaze customers by solving 
problems on the spot while reducing travel time and 
lowering supports costs. GoToAssist Express is brought to 
you by Citrix Online, a fast-growing division of Citrix 
Systems. Every month, more than 15,000 new customers 
start using Citrix Online's services to work from anywhere 
with anyone— using remote-connectivity tools to save time, 
get more done, and connect to others around the world. 

Products Sold: 

GoToMyPC, GoToMeeting, GoToAssist, and GoToWebinar. 



(800) 549-8541 I www.gotoassist.com/processor 



Servers 



SUPERMICR#' 



When buying a server, you don't want a one-size-fits-all 
solution. Super Micro uses modular and interoperable 
Server Building Blocks to offer the highest levels of flexibility 
and customization possible to design servers tailored and 
optimized for your specific needs. Super Micro's focus on 
green computing leadership, system design expertise, and 
power-saving technologies ensures the products you 
purchase are energy-efficient and application-optimized. 



Products Sold: 

• Servers 

• Motherboards 

• Chassis 



Networking 
Storage 



(408)503-8000 I www.supermicro.com 



Equipment Dealer 




In 1987, Pegasus Computer Marketing started providing 
mainframe products to the end-user market. What began as 
a sales-only organization soon adapted to offer in-house 
repair and refurbishment. During the past 10 years, Pegasus 
has focused primarily on the point-of-sale and barcode 
industries, buying, selling, and providing service contracts for 
anywhere from a few scanners to hundreds. 

Products Sold: 

We buy, sell, and service: 

• Point-Of-Sale Equipment and POS/PC Flat Panels 

• Wired and Wireless Barcode Hardware 

• Kronos Time Clocks and Accessories 



(800)856-2111 I www.pegasusconiputer.net 



Networking & VPN 



ManageEngine 

Powering IT ahead 

ManageEngine is the Enterprise IT Management Software 
division of ZOHO, which was founded in 1996 and 
previously known as AdventNet. The company strives to 
provide customers with top-notch software sold at 
affordable prices, offering more than 20 products for 
managing various aspects of the enterprise. The programs 
range from installed software to SaaS products. 



Products Sold: 

• Network management 

• Server management 

• Application management 

• Desktop management 



Help desk/service desk 
Log management and 
compliance 



(888)720-9500 I www.manageengine.com 



Clients 



dtSearcK 

^Ip^ www.dtsearch.com 



Maryland-based dtSearch started research and develop- 
ment in text retrieval in 1988. The company is known for 
speedy adoption of new programming standards, OSes, 
and file types. Plus, it has a flexible licensing model. 
Typical corporate use of dtSearch includes general infor- 
mation retrieval, Internet and intranet site searching, and 
email archiving and email filtering. 

Products Sold: 

Text retrieval products, including: 

• Desktop With Spider • Web With Spider 

• Network With Spider • Engine For Win & .NET 

• Publish For CD/DVDs • Engine For Linux 



(800)483-4637 I www.dtsearch.com 



Equipment Dealer 



Pace 




Butler^ 



• PaceButler buys used cell phones. 

• In business since 1987 

• Redeploy your used phones after upgrade 

• Donation option - directly to the non-profit of your choice 

• Dedicated to customer satisfaction 

- A+ Rating with the Better Business Bureau 

- Payment issued in four days 

• Dedicated to employee development 

- Book reading program 

- Health and fitness programs 

Products Sold: 

We buy used cell phones & PDAs, including Apple, LG, 
Blackberry, HTC, Motorola, Nextel, Nokia, PalmOne & 
Samsung. 



(800)248-5360 I www.pacebutler.CGm 



Networking & VPN 



napatech 



Specializing in the production of real-time programmable 
network adapters, Napatech has an installed base of 
more than 60,000 Gigabit Ethernet ports. The company 
sells its adapters to OEM network appliance vendors and 
targets monitoring, security, and network optimization 
systems. Napatech is headquartered in Copenhagen, 
Denmark, and also has locations in Andover, Mass., and 
Mountain View, Calif. 



Products Sold: 

• Capture, In-line, and 
Inspect adapters 

• Time sync units 



Networking monitoring 
and control 
Traffic generation 



(888)318-8288 I www.napatech.com 



Equipment Dealer 



Information 
Technology 
Trading 



At Information Technology Trading, our goal is to help you 
acquire the right hardware or software solution. We special- 
ize in purchasing and reselling data-processing equipment 
and have more than 21 years combined experience. We pro- 
vide services and system upgrades, DASD, communication, 
and memory. We're also an outlet for off-lease portfolios. 

Products Sold: 

• AS400, Advanced System/36, R/S6000, ES/9000, and 
PC systems (including lease and rental) 

• CPUs, memory, disks, tapes, displays, and controllers 

• Services, including system design and installation, 
maintenance, and buyback of existing hardware 



(877)715-3686 I www.itechtrading.com 



Attention Data Center Professionals 



Where do you go to find the 
newest products available? 

Check out each issue for . . . 

> New Product articles filled with in-depth information. 

> Quick rundowns of new data center-related products. 

> Articles with valuable product overviews and data. 



. . . then go to Processor.com and take 
advantage of our online search tools to find 
even more in-depth information! 

PROCESSOR. 




Subscribe 
Today! 

Call (800) 819-9014 



Subscribe 
Online! 

Goto www.processor.com 
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QUICK ON 

THE DRAW 

AND 

QUICK TO 

SOLVE! 



A legendary support team is 
already in your office — they just 
need the right tool. GoToAssist 
connects your team with your 
customers like never before with 
simple, powerful remote support. 



GoToAssisr 

EXPRESS 




by CITRfX 



Try It FREE for 30 Days 

www.gotoassist.com/processor 





